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JAVA EE 5 REACHES 
PROPOSED FINAL DRAFT 



BY DAVID RUBINSTEIN 

The Java Community Process 
of Sun Microsystems has 
declared that JSR 244— Java 
Enterprise Edition 5, formerly 
J2EE 1.5 — has reached pro- 
posed final draft status. Release 
of the specification was expect- 
ed in the second half of 2005; it 
now has been pushed back into 
the first quarter of 2006. A ref- 
erence implementation beta is 
expected in the coming weeks. 

Sun documentation states 
the purpose of Java EE 5 is to 
make Java development easier. 
Key to the new release is JSR 
175— A Metadata Facility for 
the Java Programming Lan- 
guage — which enables a declar- 
ative style of programming by 
allowing classes, interfaces, 
fields and methods to be 
marked as having particular 
attributes, according to Sun. 

The other key JSRs that sup- 
port the ease-of-development 
goal are Web Services Metada- 
ta for the Java Platform, EJB 
3.0, Java Architecture for XML 
Binding (JAXB) 2.0, Java APIs 
for XML-based Web Services 
(JAX-WS, formerly JAX-RPC) 
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2.0 and JavaServer Faces 1.0, 
according to the JCP Web site. 
A revised specification for 
JavaServer Pages will be filed 
shortly to allow its integration 
with JSF and resolve differ- 
ences in their expression lan- 
guages, the site said. 

"The clear message we've 
heard from J2EE vendors and 
users is that the J2EE platform 
must evolve quickly to support 
a wider range of developers, 
including less sophisticated 
developers," wrote spec lead 
Bill Shannon on the JCP Web 
site (www.jcp.org/en/jsr/detail 
?id=244). Java EE 5 is to define 
the component model, deploy- 
ment packaging and container 
requirements for components 
that use Java language annota- 
tions and components that pro- 
vide or use Web services. I 



Coral Bridges 
Islands Of 
Web Services 

Mindreef envelops the enterprise 
with collaborative SOA life-cycle tool 

ning in other departments, let 



BY EDWARD J. CORREIA 

Moving a company to a service- 
oriented architecture can in- 
volve barriers not only of tech- 
nology, but of politics as well. 
Human resources departments 
are understandably cautious, 
for example, about exposing 
their roles to applications run- 



alone the Internet at large. 

That's why Web services test- 
ing tool maker Mindreef created 
Coral, a role-based collaborative 
environment unveiled on Dec. 5 
that permits people from across 
an enterprise to participate in 
► continued on page 24 
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Depending on a user's role, the Coral interface can drill all the way to code. 



Now Private, Serena Wants Public Works 

Company relying on Eclipse to integrate its own tools 



BY JENNIFER DEJONG 

Serena Software is expected to 
deliver its first integrated suite 
next summer, combining its 
requirements and configuration 
management tools, and possibly 
others, into a single offering. 
The company also says it is rely- 
ing on ALF, the Eclipse appli- 
cation life-cycle framework 
project that it leads, to enable 
that integration. 

Although Serena's applica- 
tion life-cycle management 
tools, several of which were 
acquired from other compa- 
nies, can share data, to date 
they have been sold separately, 
said Bill Piwonka, senior direc- 
tor of product management and 
marketing at Serena. 

"Serena has not done well in 
leveraging synergies of the 
products they have acquired," 



said Melinda-Carol Ballou, pro- 
gram director for application 
life-cycle management at re- 
search firm IDC. The company 
is looking to ALF to integrate 
its own offerings, she said. 



wr 



Going private enables Serena to 
deliver on its integration vision 
faster, says Ellis. 



Serena in 2003 acquired the 
process and issue management 
tool TeamTrack from Team- 
Share. The following year, the 
company bought Merant, ex- 
tending Serena's mainframe 
change management product 
line to include Windows-based 
offerings, and it also acquired 
from Integrated Chipware the 
requirements management tool 
RTM. 

Kevin Parker, Serena's vice 
president of market develop- 
ment, did not dispute that 
Serena is looking to ALF, essen- 
tially a Web services-based inte- 
gration framework, to help inte- 
grate its product line. But he 
emphasized said that Serena's 
offerings are successfully inte- 
grated today, characterizing the 
integrations as "hand-crafted." 
► continued on page 23 
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New Visual Studio 2005. 

The difference is obvious. 




Spot the difference? Once you start coding, you'll see it Immediately. 
The new Visual Studio" 2005 has over 400 new features, such as Web.- and 
Windows* controls that reduce tedious tasks and repetition. So you 
can focus on creating great code. Spot the 10 differences above and 
play for cool prizes at msdrc.microscftcom/dtfference 
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Microsoft* 




Nothing Ventured... 

The rush of new technologies motivates those with the expertise 

and determination to create something unique-something that breaks away 

from the pack. Whether your job is developing applications, architecting 

solutions, or designing business strategies, the Intel Software Network 

can help turn ventures into gains. Tap into the power of integration and build 

on your best ideas. The freedom to innovate is yours. 
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Check us out at www, intel.com/softvs/are 
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With MPI 2.0, Intel Dabbles With Dapple 

Supersized supercomputing tool scales testings to thousands of processors 



BY EDWARD J. CORREIA 

To address the rising use of clus- 
ter technology to run supercom- 
puting applications, Intel in 
mid-November updated its tools 
that simplify the creation of 
applications for Linux-based 
high-performance computing 
clusters and for performance- 
tuning existing applications. The 
company also released the first 
Windows version of its Trace 
Analyzer and Collector perfor- 
mance-management software. 

"Clusters are becoming more 
important to high-performance 
computing," said James Rein- 
ders, director of business devel- 
opment and marketing at Intel. 
"And MPI is becoming an 
important tool to use in that 
space," he said, referring to Mes- 
sage Passing Interface, a consor- 
tium-developed specification for 
passing messages between appli- 
cations running in a cluster. 

Intel's MPI Library 2.0 
updates the product to conform 
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Trace Analyzer, now available for Windows as well as Linux, displays process timelines for as many as 4,096 
processors in a cluster. The prior version supported 256 processors and Linux only. 



to MPI 2.0 — the latest version of 
the spec — and can now support 
applications using distributed 
memory Fast Fourier Trans- 
forms, which Reinders described 
as a type of signal processing that 
translates time-based signals into 
frequency-based time composi- 
tions. "For example, this would 
enable someone to take a sample 
from the air and figure out which 
radio stations are active." 



Also new in MPI Library 2.0 
is support for the Dapple inter- 
face, which Reinders described 
as a somewhat vendor-neutral 
interconnect abstraction layer 
that sidesteps the need to sup- 
port specific interconnects, 
such as Infiniband, EtherFab- 
ric and iWarp. "Underneath the 
MPI's fabric, vendors almost 
always support a Dapple inter- 
face, which is like a device dri- 



ver and where most of the per- 
formance work is done. Our 
MPI sits on top of that, so 
instead of shipping versions of 
your app for each cluster inter- 
connect, you can ship one that 
will run on many different 
kinds of clusters." 

Also released was Math Ker- 
nel Library Cluster Edition 8.0, 
a cluster-compatible version of 
Intel's math algorithms that 



Electric Cloud Rains 
Clarity on Build Process 

New tool gives developers insight 
into parallel build log files 
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BY ALEX HANDY 

During the development 
process, it's easy to tell when a 
build is going on: Everyone's 
usually gone home for the 
night. But when a build is still 
compiling the next morning, it's 
a good bet something's gone 
sideways in the compiler. Spe- 
cializing in cluster-based builds, 
Electric Cloud on Nov. 15 
released Electriclnsight, a tool 
that it claims gives developers a 
view into just what's going on 
inside those parallel builds on 
compilation clusters. 

Mike Maciag, Electric 
Cloud's CEO, said that for 
build engineers, dealing with 
the reliability, performance and 
debugging issues of their builds 
has traditionally been a black 
art. "For the first time, we're 
taking the build out of the 
black box," said Maciag. He 
described build log files that 
are hundreds of thousands of 
pages long, incomplete and not 
human-readable. "I have two 



choices: Either do nothing, or 
find someone who's very skilled 
to spend days or weeks crawling 
through these pages of log files. 
What Electriclnsight has done 
is it has taken the days or weeks 
and made them into minutes." 

Electriclnsight is the brain- 
child of Eric Melski, a senior 
engineer at Electric Cloud. He 
said the software works by cre- 
ating a virtualized server on 
the build cluster using Electric 
Cloud's file system, which 
allows Electriclnsight to ob- 
serve exactly which files are 
being accessed and which nodes 
of the cluster are currently 
working. It then translates the 
disparate log file entries and dis- 
plays them graphically. 

"We're now able to give you 
a visual representation of [the 
build process]," said Melski. 
"You could have one node 
working and four nodes idle. 
Do I need to change something 
in my make file or something in 
my jobs to make this faster?" 
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Electriclnsight shows the nitty-gritty of a build to get to the bottom of 
any slowdowns that occur. 



Maciag went on to explain 
more scenarios in which Elec- 
triclnsight could be useful. "For 
example, let's say that there's a 
serialization in there somewhere 
in a parallel build. There are 
thousands of jobs that take place 
during the build — one might be 
creating a serialization that's 
slowing it down. There's almost 
no way for me to figure that out 
without Electriclnsight. You can 
see down to the job level and see 
where it's being serialized. From 
a breakage standpoint, I can 
draw down right into the individ- 
ual jobs and see if there are con- 
flicts, and where they are." 

With the release of Elec- 



triclnsight, Electric Cloud has 
renamed its namesake cluster- 
based build software as Elec- 
tricAccelerator. The company 
released version 3.0 of the 
software at the end of Novem- 
ber, with the primary changes 
being compatibility with Elec- 
triclnsight. 

Currently, Electriclnsight 
works only with ElectricAccel- 
erator, though Maciag said his 
company is considering offering 
a version that works with other 
cluster-based compilers. 

Electriclnsight is available 
today and costs US$20,000 per 
cluster. ElectricAccelerator costs 
$2,000 per seat. I 



Reinders said uses MPI to send 
data to multiple processors and 
collect answers back. 

Intel's new Trace Analyzer 
and Collector 6.0 now supports 
MPI 2.0 and clusters containing 
as many as 4,096 processors. 
The prior version was limited to 
256 processors. "Trace Analyzer 
is an essential tool for MPI pro- 
grammers," Reinders said. 
"Without this insight, you can 
never be sure you're getting the 
most performance out of the 
application and the platform." 

Central to the solution is 
the Collector module, which 
gathers data from all the 
processors for analysis. The 
new version, he said, includes 
improved data reduction algo- 
rithms to improve output and 
compensate for the increased 
number of processors support- 
ed. "We can now get larger and 
more meaningful traces over 
longer time periods." Intel also 
now includes a Windows-host- 
ed version of the Analyzer part 
of the tool; the Collector is 
Linux-only. 

Also priced separately, Intel 
offers the three HPC tools as 
Cluster Tool Kit 2.0, starting at 
US$750 per seat. 

NOT SO SUPER 

Intel updated two of its tools for 
mainstream developers. VTune 
Performance Analyzer 8.0, a 
tool available for Windows 
developers for a decade, has 
reached feature parity on Lin- 
ux; previously, the Windows 
version offered a full graphical 
interface, compared with the 
command-line Linux release. 
The $699-per-seat tool includes 
full support for Linux kernel 
2.6 and integration with Eclipse 
3.1. It also now supports 4,096 
processors, up from 256. 
"VTune can now very nicely 
meet the needs of developers to 
analyze very large clusters and 
give accurate information for 
tuning code." 

Integrated Performance 
Primitives is Intel's library for 
performing advanced math 
functions like Fast Fourier 
Transforms and linear pro- 
gramming. The $199 version 
5.0 now has optimizations for 
video, audio and signal pro- 
cessing, as well as new string 
processing and encryption 
functions. I 
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, COMPANIES , 



EDS, a global IT outsourcing company, announced the opening of nine 
technology centers to assist developers building applications that use 
EDS' Application, Mobility and Enterprise Integration services suite, 
which is based on Microsoft tools and products, such as Visual Studio 
2005, SQL Server 2005 and BizTalk Server 2006. The centers are 
located in Kokomo, Ind.; Redmond, Wash.; Saginaw, Mich.; Cairo, Egypt; 
Chennai, India; Sao Paulo, Brazil; Swansea, U.K.; Wellington, New 
Zealand; and Winnipeg, Manitoba . . . Orange, a provider of services 
and products for the telephone market, and PalmSource (now a sub- 
sidiary of Access) have joined the Linux Phone Standards Forum. They 
are working to offer an alternative to Symbian OS and Microsoft's 
mobile operating systems. They hope to complement the work of the 
Mobile Linux Initiative, from Open Source Development Labs, which is 
also working to encourage the use of Linux on mobile devices. 



NEW PRODUCTS. 




Open Source Development Labs (OSDL) has launched an online 
patent commons reference library, giving developers of open-source 
software the ability to search key OSDL 
databases, which contain more than 500 
patents. The searchable databases enable 
developers as well as users and vendors to 
view patent data on open-source software and standards . . . Com- 
ponentOne has released Studio Enterprise for Borland Delphi 
2006 as part of Borland Developer Studio. Studio Enterprise 
includes a development and deployment license for select Compo- 
nentOne Studio Enterprise .NET and ASP .NET components. It also 
includes a development license for 12 .NET and ASP .NET products 
. . . KUKA Controls, a developer of real-time operating system solu- 
tions for Windows XP, has introduced into beta its new IEEE 1588 
software module for both Wind River's VxWorks for x86 and KUKA 
Controls' VxWin real-time Windows extension. VxWorks apps requir- 
ing clock synchronization can seamlessly synchronize with other 
IEEE 1588 devices. The software module is fully compliant with the 
IEEE 1588 standard for precision clock synchronization of networked 
measurements and control systems . . . JetBrains has unveiled 
TMate 2.0, a combination Web application and plug-in for JetBrains' 
Java IDE, IntelliJ IDEA. It provides advanced 
repository management capabilities for 
users of CVS or Subversion version control 
systems from a Web browser or within IntelliJ IDEA. It organizes raw 
data in a customizable browser that allows users to track modifica- 
tions and to generate customized team reports. 
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UPGRADES 



Seeburger announced it has upgraded its EDI adapter for the SAP 
Exchange Infrastructure (SAP XI) to version 1.5, to equip users with 
new tools for mapping, tracking and archiving EDI messages. Fea- 
tures include message-tracking tools, enabling business or IT users 
to determine whether purchase orders, invoices and other trading 
documents have been sent or delivered to external business part- 
ners. Also, message archiving support allows users to maintain a 
complete audit trail to meet international tax regulations and other 
information or compliance requirements . . . ANTs, a developer of 
SQL database management systems, introduced MySQL and 
Informix database support to a new version of ANTs Data Server 
3.4. It already supported Oracle, Oracle TimesTen, SQL and Sybase 
databases . . . Alpha Software is shipping version 7 of Alpha Five 
for database application developers to create and deploy desktop 

and Web-based applications 
without having to write code. 
Areas such as form loading, repainting and program 
load times have been improved. There is a new list 
view control that lets users display data in a tabular 
view. Lists can be automatically populated with stat- 
ic data, or data from Alpha Five, ADO or ODBC data sources, and the 
list view can be dynamically bound ► continued on page 16 
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Advice From the Trenches: 
Building a Winning Team 



Development managers offer tips for 



BY JENNIFER DEJONG 

When Luke Melia sits down 
with potential hires, he likes to 
ask them a funny question: 
"How many cars can you fit on 
the island of Manhattan?" 

The software development 
manager at New York City- 
based Oxygen Media isn't look- 
ing for real answers. But win- 
ning responses — such as "Can 
we park them on rooftops?" or 
"Can we use Matchbox cars?" — 
tell Melia a lot about a candi- 
date's aptitude for thinking 
through programming problems 
creatively Such responses can 
result in a job offer. "We hire 
developers who can think out- 
side the box," he said. "We like 
candidates who have the confi- 
dence to try new approaches." 

The best development team 
members combine program- 
ming knowledge and creativity 
with strong collaboration and 
communication skills. But assess- 
ing whether a candidate really 
has the right mix is often difficult 
at best, even when a resume 
sports impressive credentials. A 
handful of development man- 
agers offer real-world advice on 
how to figure out whether a 
potential player is the right pick 
for your team. 

INTERVIEW, TEAM-STYLE 

Programming expertise and 
creativity top the list of what 
these development managers 
want in new hires. But commu- 
nication and collaboration skills 
matter, too. "The days when a 
programmer can be an anti- 
social person who works alone 
all day in a cubicle are over," 
said Melia. One way to make 
sure you don't end up with a 
throwback on your hands is to 
get the entire team in on the 
interview. That can put candi- 
dates on the spot, but it also 
shows firsthand how they inter- 
act with others, said Melia, who 
is currently recruiting a fourth 
team member. "You see how 
they act in a meeting." 

It's important to determine 
how a potential hire is likely to 
react to difficult exchanges, said 
Dave Maloney, manager of 
quality assurance at Headwater 
Technology, a Toronto-based 




It's a good idea to get the entire 
team involved in the interview, says 
Oxygen's Melia. 

professional services firm that 
develops Linux applications in 
C and Java. Such exchanges 
aren't likely to occur during the 
interview, so you have to pose 
pointed questions such as: 
"How do you react when QA 
trashes your program?" he said. 
Finding out how candidates 
have handled such interactions 
in the past is critical to assessing 
who will or won't fit into your 
company. "You want them to 
tell you step-by-step how the 
process worked at their previ- 
ous job," said Maloney, refer- 
ring to gathering requirements 
data from business users. 

Some bosses opt out of the 
group interview. That frees 
team members to ask candi- 
dates any question they want, 
making up their own minds, 
said Rod Hamilton, CIO of 
Miami Lakes, Fla.-based 
Hygeia, which develops soft- 
ware for managing transactions 
between health-care payers and 
providers. And it also tells 
potential hires that the team 
approach is central to how your 
company does business. Before 
Hamilton extends an offer, the 
nine-person team, which works 
in .NET, votes on the candidate. 
"If the outcome is not unani- 
mous, we go with the majority," 
Hamilton said. "At the end of 
the day, the decision is mine. 
But I have never hired a candi- 
date who didn't get a majority 
vote from the team." 

Writing code is, of course, at 



hiring the best 

the heart of what developers do. 
To make sure candidates are 
accomplished at that, Melia asks 
them to bring in a code sample 
and walk the team through it. 
That gives them a feel for how 
the programmer thinks. He also 
asks potential hires to stand up 
and write code at the white 
board. "It's amazing how people 
can struggle with that," he said. 
"For most of their careers, they 
worked inside an IDE where 
[things such as] method names 
simply pop up," said Melia. The 
goal of that exercise isn't to test 
candidates on the ins and outs 
of a programming language. It's 
to evaluate whether their 
object-oriented skills are strong, 
said Melia. His team uses 
Microsoft Visual Studio and 
codes in C#. But he isn't insist- 
ing on that expertise. "We will 
train the right Java program- 
mer," he said, noting he has 
made that leap himself. 

DEALING WITH DIVERSITY 

There are other hiring issues 
team managers must contend 
with. Depending on the cultural 
and ethnic makeup of your 
team, you have to ask candi- 
dates what types of environ- 
ments they have worked in, in 
terms of diversity, said Maloney. 
"But you can't direct questions 
that appear to be an investiga- 
tion into the candidate's back- 
ground." That can help you 
assess whether a potential hire 
is likely to work effectively with 
an offshore development team 
in India, added Jennifer Seth- 
man, a contract development 
manager in New York City. "You 
want someone who is open- 
minded with respect to differ- 
ent cultures and nationalities," 
she said. 

Finally, when evaluating can- 
didates for openings on larger 
teams, you should take into 
account the overall skill set of 
that team, said Hygeia's Hamil- 
ton. He recently brought three 
new developers on board, fill- 
ing two of the positions with 
candidates for whom English 
is a second language. "Verbal 
communications skills were less 
important," he said. "We are very 
strong in that area right now. I 
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Next-Generation DB2 to Support XML 



IBM allows developers to pick relational or unstructured data types 



BY ANDY PATRIZIO 

IBM has announced the next 
version of its venerable DB2 
relational database manage- 
ment software, code-named 



Viper, which has been designed 
to add native support for 
unstructured XML data. 

In addition to the usual rows 
and columns of an RDBMS, 



Viper will allow for storage of 
data such as video files, audio 
files, Microsoft Office docu- 
ments, PDFs, e-mail and XML 
documents. IBM claims that 



Viper is a first-of-its-kind 
hybrid that supports both rela- 
tional data and native XML 
data without requiring the 
XML data to be reformatted. 



It's amazing 

what you can do with 
the right tool! 
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corrsum maie adj. {ken-sum It. kon so- mot) 

I- Complete or perfect [n every res pec: 

2. Supremely accompMshed or skilled 

3. Compile 



■Cak engine with 273 built-in formulas 

■ Cross-sheet referencing 
-HierarchtaF views 
Enhanced printing options 
> Column Filtering 

■The most extensive feature set available 
-No runtime or royalty fees 
-Free maintenance dawnfoadi 
k Unlimited email support 
-Unlimited access to farPnlnt support forum 
•; u i i ays of free phone su pport A 



FarP#int 

www.fpoint.com 
or 1-800-645-5913 






A project isn't quite right when you 
don't use the appropriate tool. The same is true 
for application development. Without the appropriate 
tool your application isn't quite right. Why waste the 
time with components that have less functionality? 
Spread is air you'll need to get the job done right the 
first time. Spread fs the consummate spread/grid 
development component. Log on to wwwipointxom 
to download a 30-day free trial and check out our 
other great products. 



Providing flexible, powerful and 
reliable solutions for your 

development needs. 



Not so, said Noel Yuhanna, 
senior analyst with Forrester 
Research, who covers the data- 
base market. He said IBM is late 
to the table with XML support. 
"From what we see, its more of a 
catch-up to Oracle and SQL 
Server. Oracle has been offering 
this for a few years, and SQL 
Server 2005 also offers native 
XML support," he said. 

Native XML support in DB2 
is important to IBM's SOA 
strategy, which involves offer- 
ing information as a service, 
where the value isn't in the 
information itself, but in ser- 
vices wrapped around that 
information, according to Jeff 
Jones, director of strategy for 
IBM Information Management 
Software. "It's important to 
move beyond seeing databases 
as giant containers and think of 
them as service coordinators 
around the assets," he said. 

This includes full support 
for XQuery, the query language 
for XML. Jones calls Viper 
"bilingual" because data can be 
accessed either through tradi- 
tional methods or by using 
XQuery. Applications can use 
XQuery, standard SQL or both 
to retrieve data from either or 
both RDBMS and XML stor- 
age formats. IBM also has 
added more than 100 SQL 
extensions for XML, he said. 

Regardless of which data- 
base vendor was first, support 
for unstructured data is neces- 
sary, said Yuhanna. Forrester 
estimates that the amount of 
data in an enterprise doubles 
every two years, and much of 
that is unstructured. "Data- 
bases have done a good job 
managing structured data, but 
how about unstructured data? 
Those are the challenges. The 
whole notion of unstructured 
data being managed by relation- 
al databases is being required 
more and more," he said. 

In addition to the XML sup- 
port, DB2 Viper will add sup- 
port for range partitioning, giv- 
ing Viper support for all three 
common methods of database 
partitioning at the same time. 
It's already had hash partition- 
ing and multidimensional clus- 
tering for some time. This will 
allow for a database to be 
arranged for the needs of each 
enterprise division. 

IBM also plans to extend ear- 
ly support of Viper to the PHP 
development community using 
Zend Core for IBM, a PHP 
development and production 
environment integrated with 
IBM's Cloudscape and DB2. 1 



£ Seapine Software 

lif.vtjHftitv development 



Developers love creating code.,. 
Managers crave process control. 
Bridge the gap with Seapine CM 

Software development is a team effort with developers, testers, 
and management all working toward one goal — delivering the 
highest quality product on time. ^^^tfM 



Built on award-winning TestTrack Pro and Surround SCM, 
Seapine CM brings structure to source control and issue 
management improving communication while accelerating 
product development. 

Seapine CM helps your team.,. 

Define custom change request workflows, putting you in control 
of who mokes changes and who authorizes the closure of issue 

Associate source code changes with defects or change requests. 



Gain a thorough understanding of how much work rem 
before project completion. 

View complete audit trails of what changed, why+ and by whom. 

Understand how close you are to release— how many issues are open, 
how quickly are you closing them, how many are re-opened? 

Successful team-based development requires the proper process 
supported by the right development tools. Tools that ore 
flexible, easy to use, secure, and scalable— like Seapine CM. 



Features: 

Complete source code conrrol 

wHh private workspaces. 
automata meting, role-based 
security and more. 

Comprehensive defect 

management— track change 
requests, bug reports, feature 
requests and more. 

Fast and secure remote access to 
your source files and defecis 
—work from anywhere, 

IDE integration with JBuHder, 
Visual Studio, Eclipse and other 
leading dewef-opment tools. 

Advanced branching, triggers, 
email notlficatiofis. fu!ry 
configurable workflows* and 
customizable fields put you in 
complete control of your process. 

Open Interfaces— triggere, emaH 
notifications, SOAP support, XML 
data exchange, and ODBC dfent* 



fable and reliable 
crass-platform, client/server 
solution supports Windows. Linux. 
Sotaris, and Mac OS X. 

Full Unicode support or 
international characters across 
various languages, ensures data Is 
not tost or misinterpreted. 



Achieve major improvements in software development performance through 
better too! integration and process automation, Manage defects, development 
issue s, and change requests with a ward- winning Tesflraclc Pro and gain complete 
control over your source code and change process with Surround SCM, Sea pine's 
integrated change management tools are feature rich, highly scalable, Web 
enabled, and cross platform. Streamline your development process with Seapine 
CM and hetp your team deliver quality software products on time, every time. 




Sujiound SCM 
Source Conirol 



V^JtJ k--.-r Track Pro 

Dtifwl Managomanf 





GA Wizard 
AiitotnaEGd Testing 



Learn more about the 

Seapine CM suite at 

www.seapine.com/scltcm 

or call 1-888-683-6456 






ie- 2£»5 Seapine. Software, kic AH ngnis reserved Surround SCM, TestTreck Pro, and Q A Wizard are either registered irademarNsor Irademsrfcs of Seapine Software, Inc 
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Borland: Delphi 2006 Will Build Morale 

Company says next version of its IDE also will fill gaps left by Microsoft tools 



BY ALEX HANDY 

As Microsoft marches its 
developers toward .NET and 
the future of Windows, Bor- 
land Software with the next 



version of Delphi has set its 
sights on eliminating the com- 
mon annoyances that plague 
developers throughout a pro- 
ject and filling in the gaps left 



by Microsoft tools. The com- 
pany demonstrated an early 
version of the new IDE at its 
DevCon show in San Francis- 
co in November. 



Rob Cheng, Borland's di- 
rector of product marketing, 
said that one of the most inter- 
esting pieces of functionality 
that doesn't exist in Visual Stu- 
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dio is persistence. "[Develop- 
ers are] familiar with J2EE 
object persistence and map- 
ping [but] that doesn't exist in 
.NET." He said Borland's En- 
terprise Core Objects persis- 
tence framework gives that 
capability to Visual Studio 
developers. 

STRESS MANAGEMENT 

But for Borland, the new fea- 
tures within its well-aged IDE 
(Delphi turned 10 this year) are 
not as important as helping 
developers minimize their day- 
to-day irritations. 

"There's so many things 
that go on that the developer 
has no control over," added 
Cheng, citing problems such 
as last-second changes, feature 
creep and the evolution 
of requirements. "All these 
things are happening to the 
developers in their day-to-day 
lives. Having fact-based deci- 
sion tools, having require- 
ments that link back into tools, 
these things offload a lot 
of that managing up and out 
that drives developers crazy. 
It is a little annoying for a 
developer if they didn't have 
some kind of auto-completion 
in their IDE; it's a lot more 
annoying if the last two 
months of work are irrelevant 
because of some change in the 
requirements." 

Cheng asserted that such 
new features in Delphi 2006 
will help developers minimize 
their daily stress levels. 

Delphi also will refine its 
UML support. For teams 
versed in the ways of agile 
programming methodologies 
such as XP or Scrum, collabo- 
ration is simplified by Delphi's 
integrated messaging and 
code annotation capabilities, 
claimed Mike Hulme, senior 
director of product marketing 
at Borland. 

Also new is the inclusion of 
support for C, C + + and C# in 
a single product, a move previ- 
ously announced by Borland. 
The new versions of Borland's 
development environments 
will be rebranded as Borland 
Developer Studio, and will 
include Delphi 2006, C + + 
Builder 2006 and C# Builder 
2006. 

Delphi 2006 is set to be gen- 
erally available by the end of 
this year. I 
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Sun Frees Studio 11, Supports Postgres in Solaris 10 



BY ALEX HANDY 

Sun Microsystems last month 
made a flurry of announce- 
ments, among them the release 
of the now-free Sun Studio 11 
and the inclusion of support for 
Postgres in Solaris. The compa- 
ny also announced that it had 
redesigned its Sun Developer 
Network Web site. 

Sun kicked off a cavalcade of 
announcements with news of 
version 11 of Sun Studio, its 
development environment for 
C, C + + and Fortran, which is 
now available for free to regis- 
tered Sun developers. 

Studio 11 is primarily 
designed to help developers cre- 
ate multithreaded- and multi- 
processing-friendly applications 
for use in Solaris or on Sun hard- 
ware. The software is available 
now, with a multilanguage ver- 
sion of the application set to be 
delivered before Jan. 15. 

Sun also announced it would 
begin supporting the Postgres 
database within Solaris 10 and 
beyond. The announcement 
was accompanied by other 
Solaris 10 news, such as the 
inclusion of a new 128-bit file 
system — ZFS — within Open- 
Solaris, and Solaris' newfound 
Linux compatibility, thanks to 
Sun's collaboration with Red 
Hat. Before the end of the year, 
Sun announced, Solaris 10 will 
be able to run Red Hat Linux 
binaries within a container. 

Sun's decision to support the 
Postgres open-source database 
means that the software will now 
be included with Solaris for 
installation by users. Sun has 
already begun to offer Postgres 
with Solaris 10, but the official 

FREE 
TRAINING! 




Visit the SD Times 
Web Seminar Archive at 

www.bzmedia.com/webseminar 



integration of the database into 
the Solaris 10 installer will not 
take place until early next year. 

Alongside these Solaris 
announcements, Sun represen- 
tatives spoke of the company's 



newfound investments in Xen, 
the open-source virtualization 
suite popular among Linux 
users. Xen will begin to 
become more prominent in 
Solaris 10 next year, said Sun 



representatives. 

Finally, Sun announced the 
relaunch and redesign of its 
Sun Developer Network Chan- 
nel. The Web site now features 
tutorials, development tips and 



videos to help programmers 
get a handle on Java, Solaris 
and other Sun technologies. 
The new Sun Developer Net- 
work Channel is online at 
developer.sun.com/channel. I 
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Versatih 'Data Wizafd' 
within Visual Studio 2005 



The Most Tightly Integrated Data Visualization 
Tool Available for Visual Studio 2005 

PROOF U: The Chart FX for Visual Studio 2005 Smart Tag Wizard provides a 

full Data Wizard option available to other controls in Visual Studio 2005. so 
developers can quickly create and/or connect to an existing database or 
dataset in a project. Although Visual Studio 2005 makes it simple to connect- 
to data sources, there is still a lot of processing thai needs to be done in 
order to make a datase* functional to a chart component. The Chart FX for 
Visual Studio 2005 Smart Tag Wizard adjust data to chart" encapsulates 
basic datasouTce configuration that a I tows a developer to map fields in their 
database statement to the chart and instruct Chart FX how to process and 
use this information in the chart- learn mare about the$earfile$$ integration 
and powerfui features at tvwvHLjoft waf#fy£Om- 
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MyEclipse 4.1 Makes Move Toward AJAX 



BY ALEX HANDY 

With an eye toward speeding 
development of AJAX-enabled 
Web applications, Piano, Texas- 
based Genuitec is readying its 
MyEclipse 4.1 development 
framework for a mid-Decem- 
ber release. The IDE will now 
support JavaScript authoring 
and debugging as well as Spring 
and Hibernate. 

Wayne Parrott, Genuitec's 
vice president of product devel- 

Stylus Studio 
Supports Newest 
XML Standards 

BY ANDY PATRIZIO 

DataDirect Technologies in 
mid-November released Stylus 
Studio 2006 XML Enterprise 
Edition, the latest revision of its 
XML IDE, with updates to sup- 
port the newest XML stan- 
dards, including XQuery and 
the X12 ANSI standard for EDI 
transaction interchange. 

The Bedford, Mass., compa- 
ny also released Stylus Studio 
2006 XML Deployment 
Adapters, a set of Java compo- 
nents that provide bidirection- 
al, programmatic access to any 
data source as XML. Non-XML 
data can be streamed to XML 
processors such as Apache's 
Xalan and the Saxon XSLT and 
XQuery processor. 

The general theme of Stylus 
Studio 2006 "is legacy data inte- 
gration using XML technolo- 
gies," said Jerry King, product 
manager for DataDirect XML 
products. 

The X12 data conversion 
wizard helps to generate 
schema for bidirectional data 
exchange between an X12 EDI 
data source and an XML source. 

Stylus Studio 2006 also adds 
XSLT 2.0 processing, simplifying 
the creation of XSLT 2.0 
stylesheets, and XQuery 1.0 pro- 
cessing to aid in troubleshooting, 
debugging and enhancing 
XQuery code. DataDirect is 
claiming that Stylus Studio is the 
only XML IDE at this point to 
support the XQuery 1.0 Candi- 
date Recommendation and 
XSLT 2.0 Candidate Recom- 
mendation releases. 

Stylus Studio 2006 XML 
Enterprise Edition is available 
now for US$895 per seat; Stylus 
Studio 2006 Deployment 
Adapters cost $1,000 per server 
processor. I 



opment, said that the move into 
the AJAX space is kind of a 
departure for the company. 
"With this release, we're ship- 
ping new JavaScript editors and 
a debugger which is tightly 
integrated into the Eclipse 



environment. It's a very power- 
ful development experience for 
most developers. Not only are 
you able to debug and work on 
server-side tools, but you'll now 
have visibility into the runtime 
on the client with these 



JavaScript tools." 

Parrott said that J2EE tooling 
has been moving toward simplic- 
ity of development, and thus his 
company has decided to add 
support for Spring and Hiber- 
nate into MyEclipse 4.1. "With 



BEA recently adopting Spring 
into their Web Logic Server, 
they've legitimized Spring as a 
container for EJB and business 
services," said Parrott. 

A standard subscription of 
MyEclipse 4.1 costs US$30 per 
user per year, with a more fully 
featured subscription costing 
twice that. I 



O Your best source for sofitrnre 
development tools! 
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A collaborative platform for Web servl* 
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Corporate Architect 

Codify corporate standards, fatst 
pHracttceS H and governance policy around 
WSDL and schema 



Project Architect 

Leverage rules from corporate architect 
while creating shared workspaces (hat 
add documentation, example scripts* and 
simulation data to enhance (he 
WSDL contract 




Community Area 
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Client Developer 

Enter the development process 
earlier with Mindreef Coral's auto 
documentation and simulation 
features 




Testing 

Leverage architects example scripts 
and developer's unit tesls to quickly and 
easily create robust regression tests j 



Support Staff 

Capture all associaled problem 
artifacts into a Mindreef Shared 
Workspace*, allotting any team 
member to reproduce a problem 
iit toe push of a button 



Governance 
Testing 
Diagnostics 
Support 









Service Developer 

Use shared workspaces from Project 
Aifhiiuth 10 hilly understand 

requirements. Create unit tesls 
a u ta mane ally during development 



The Mi rid reef Coral platform provides collaborative 
tools for the XML software layer that increase 
productivity and quality throughout the entire SOA 
li recycle. 

Our lifecycle approach— from well-adopted best 
practices early in the process to efficient problem 
resolution post-launch— drives down the cost of 
developing and maintaining Web services, leading 
to more efficient, cost-effective SOA. We designed 
Mindreef Coral to leverage your most valuable 
assets— your service team members— to achieve 
sustainable business results. 



Pay as you grow pricing — from your first Web service project 
to large SOA initiatives. Mindreef Coral starts at just $999 
peryear for a server supporting two concurrent users. 
Additional licenses are just $499. 

To download a free trial, visit www.mindreef.com, or to 
speak with a Mindreef representative, call 
603-465-2204 x510. 



* patent pendkig 

• //Oil's. Mindrec-F, Inc. Mi nri rooF i s n regtslered trademark, and Mi rid reel Coral is a Eradernaric nf Ml ndneef. fnc. In the 
Ufl iled States arid Other caunlries-. All rights reserved. 
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No More Change for Changes Sake 



Aldon tool empowers businesses to prioritize incident requests 



COMMUNITY 

MANAGER 



BY DAVID RUBINSTEIN 

There is urgent, and 
then there is important. 
Often, it's difficult for 
business decision makers 
to understand the differ- 
ence when it comes to 
changes in applications, 
or to even understand 
there are choices to be 
made. 

With the release of 
version 7.0 of its Com- 
munity Manager change 
management solution, 
Emeryville, Calif.-based 
Aldon takes a help-desk 
change management 
approach to the prob- 
lem by including a more 
sophisticated approval 
engine that the company 
says makes it easier to 
get everyone involved 
who needs to be involved in the 
decision-making process. 

Aldon president and CEO 
Daniel Magid said Community 
Manager 7.0, which was 
released Nov. 14, puts in place 
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Community Manager 7.0 takes a help-desk approach to change management. 



an infrastructure for proce- 
dures that companies can fol- 
low to make IT more pre- 
dictable and productive. 

"The prioritization process 
[for change requests] is impor- 



tant. People need to be able to 
decide if an incoming incident 
will affect the [production] 
schedule, or if the incident is 
important enough to interrupt a 
schedule for," Magid said. 



"Business wants IT to 
say, 'Here's what it's 
going to cost,' then you 
can decide what you 
want to do." 

There are several tools 
on the market for handling 
application change man- 
agement, Magid acknowl- 
edged. But he claimed 
Aldon's solution takes 
change management back 
further in the process, 
allowing users to run a 
call center for taking inci- 
dent reports and then 
managing the workflow 
from there. "We can see 
who's calling in a defect, 
then we can route a 
defect report to the prop- 
er person" for approval 
before the work ever is 
ordered, he explained. 
This ability to bring in the 
right decision makers to priori- 
tize change requests as they 
come in is what begins to tie IT 
more closely to the goals of the 
business, Magid said. 



The improved approval 
engine within Community 
Manager provides a granularity 
that enables project managers 
to say, for instance, that to get 
from point A to point B for a 
certain kind of incident, you 
need three of the following 
five people to approve it, 
Magid explained. Alternatives 
also can be set up so that if 
those people are not available, 
others can be contacted for 
approval. 

In addition, companies can 
establish rejection process- 
ing — "What happens when an 
incident request is denied," 
Magid said — which more 
closely models a company's 
business processes. 

The new version also 
enables users to set field-level 
permissions on every field in 
the tool, so project managers 
and business analysts can con- 
trol the collection of informa- 
tion at a finer level, Magid 
added. 

Community Manager 7.0 
costs US$2,300 on a per-seat 
basis; there are agent licenses, 
for the users prioritizing the 
incident requests; and end-user 
licenses, for those giving 
approvals to change requests. I 
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MORE UPGRADES 



_L 




EMBARCADERO 

TECHNOLOGIES. 



< continued from page 6 

to Alpha Five tables . . . Embarcadero Technologies has released 
DT/Studio 3.0. DT/Studio includes clustering and parallel processing 
capabilities to meet large data load 
demands, improve server efficiency and 
ensure stability. Enhanced monitoring 
and troubleshooting capabilities help guarantee high availability of 
mission-critical production environments . . . The Numerical Algo- 
rithms Group has released NAG C Library. New functions provide 
programmers with more than 1,000 embedded numerical routines 
. . . JNBridge has released JNBridgePro 3.0, 
which introduces access to .NET generics from 




Java and access to Java generics from .NET, 
secure communications between Java and .NET 
through SSL, and mapping of Java enums to .NET enums . . . IBM 
Rational testing tools Functional Tester and Performance Tester 
now work within Visual Studio 2005. They can be used to test Visu- 
al Studio applications instead of using shell-based testing and sup- 
port various types of terminal environments, including VT100 
. . . Data Mirror has released DataMirror Transformation Server 
5.3. New features include conflict resolution, complex transforma- 
tion and improved usability. Its capabilities have been expanded for 
Master Data Management, and for SOA and Web services applica- 
tions . . . Combit has made available a Visual Studio 
.NET 2005 version of its report 
«^t / generator List & Label 11. The 
comblt/y^ t updated .NET component is a free 
* download for all its customers and 

includes a variety of samples . . . YesSoftware has 
released version 3.0 of CodeCharge Studio. Web developers can use 
new features such as custom Web reporting, a Web calendar builder, 
and an internationalization and localization feature to simplify the 
creation of multilingual Web applications with localized data and 
resources . . . TechExcel, a developer of issue and process manage- 
ment solutions, has announced DevTrack 6.0. It enhances the 
defect and project tracking tool's power to manage and automate 
the application development life cycle through extended workflow 
functionality, scalability and integration with IT service and test 
management solutions. 
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PEOPLE 



^^~ Robert W. Felton, a longtime member of the TenFold 

m board of directors, has been elected chairman of 

the board. Felton also serves as chairman and CEO 

\L of DevonWay, an on-demand software company. He 

j^^^Jl is tne founder and former chairman and CEO of Indus 
I International, an asset management software 

FELTON provider . . . WebMethods, a provider of business inte- 
gration and optimization software, has named Richard P. Chiarello 
as COO. The promotion fills the position previously held by 
David Mitchell, WebMethods' president and CEO. Chiarello joined 
WebMethods in April 2004 as the company's EVP of worldwide 
operations, where he reported directly to Mitchell and was responsi- 
ble for the company's global sales and services operations. He 
will continue to perform these duties in his new capacity 
. . . CollabNet has named Vaughan Woods as VP of its Asia-Pacific 
business unit. In this newly created position, Woods assumes 
responsibility for CollabNet's Asia-Pacific sales, operations and 
professional services. The company has existing investments in India, 
Japan and Korea, and with this executive appointment, it plans to 
expand its presence in the region in 2006 . . . Novell has announced 
Jeffrey Jaffe as EVP and CTO. He brings more than 
25 years of experience from IBM and Lucent Technolo- 
gies. He will be responsible for Novell's technology 
direction, as well as leading Novell's product business 
units. This is Novell's second C-level move since the 
end of October, when Ron Hovsepian was promoted to 
president and COO. I 




Windows Vista: Tread 
Carefully, Says Gartner 

Research firm recommends being cautious about 
Microsoft's forthcoming operating system upgrade 



JAFFE 



BY ANDY PATRIZIO 

Windows Vista will require 
careful testing and pilot pro- 
grams, but companies should 
neither hold back nor rush into 
deploying Microsoft's forthcom- 
ing desktop operating system, 
according to analysts at Gartner. 

The research firm recently 
issued a report titled "Ten Rea- 
sons You Should and Shouldn't 
Care About Microsoft's Win- 
dows Vista Client." Because 
Microsoft has removed its most 
ambitious technologies, like 
WinFS, the new file system, and 
Next- Generation Secure Com- 
puting Base, aka Palladium, 
Windows Vista isn't as great a 
leap from Windows XP as it 
could have been. 

Nonetheless, there are im- 
provements in Vista that do 
make it worth consideration. 
Gartner's recommendation is to 
approach Vista the same way 
companies have approached 
other operating system migra- 
tions: slowly but surely. 

"We don't usually say to peo- 
ple to skip versions," said Mike 
Silver, research vice president 
for Gartner and co-writer of the 
report. "Businesses that tried to 
skip versions of Windows ended 
up getting burned keeping an 
old version longer than they 
should have. So bringing in new 
PCs with Vista is our general 
recommendation." 

One exception: Companies 
still running Windows 2000 
should look at Vista sooner 
rather than later, he said. Appli- 
cation vendors are already look- 
ing to end support for Windows 
2000. Windows XP users can 
take their time to test their 
applications for breakage. 

"At this point, our conclusion 
is it's a solid incremental 
release, and we're not expecting 
organizations to make a busi- 
ness case to move en masse if 
they are running Windows XP," 
said Silver. "In 2000 to 2001, 
people were running Windows 
NT 4 and Windows 98, and it 
was hard to make a business 
case not to bring in 2000. In this 
case, you have a pretty good OS 
that people are happy with, 
which makes the business deci- 
sion more difficult." 



Vista will have some features 
well worth a company's consid- 
eration, he said. User manage- 
ment will be a big improvement. 
Many applications will crash 
because they require that the 
user be in administrator mode to 
function properly. According to 
Gartner, Vista gives a great deal 
more flexibility in user access 
and permissions. 

In particular, Silver liked the 
improvements to the Vista ver- 
sion of Internet Explorer 7, 
which will not allow software to 
be loaded or installed without 
prompting users for their pass- 
word. (Mac OS X has a similar 
security feature.) So users will 



know when an attempt is made 
to install software on their 
machine or make changes to 
the registry, and they can nix 
the attempted changes. 

Windows Vista is a major 
release and not one to be taken 
lightly, said Silver. It will require 
some significant planning and 
testing before an organization 
rolls it out, but it's not as bad as 
it could have been. "Microsoft 
needs to strike a balance. If they 
put too much in a release, it gets 
too difficult to deploy. If they 
put too little in a release, then 
there's no value in deploying it. 
This one falls somewhere in the 
middle," he said. I 



Software AG's AJAX Tool 
Lets Apps Map to Google 



BY EDWARD J. CORREIA 

Integration solutions provider 
Software AG in mid-November 
integrated its Composite Appli- 
cation Integrator tool for AJAX 
with Google Maps, giving 
developers the ability to build 
applications that exchange data 
with the popular AJAX-based 
Web service. 

Introduced in October, 
Composite Application Integra- 
tor (CAI) is a drag-and-drop 
development environment and 
runtime for building AJAX 
applications that the company 
claims does not require any 
knowledge of HTML or 
JavaScript. Applications can be 
deployed to Java application 
servers, accessed through Java 
SWT clients or integrated with- 
in IBM or SAP portal servers. 

"One thing that was lacking" 
in the industry, according to 
Theo Beack, Software AG's 
chief SOA architect, "was the 
ability to take services from dif- 
ferent [AJAX service] providers 
and present them in new ways." 
Integration with Google Maps, 
he said, will permit developers 
to incorporate data from the 
service into their applications. 
Google Maps provides such 
information as business and 
residence address and tele- 
phone listings, driving direc- 
tions and proximity data. 



Available now for Linux, 
Unix and Windows, Composite 
Application Integrator costs 
US$600 per server processor 
and includes a reusable frame- 
work for Java code, EJBs and 
classes, Tomcat or JBoss Servlet 
engines, plus more than 80 
AJAX UI controls. 

Also included with CAI is 
CentriSite, a UDDI-based SOA 
repository introduced in Octo- 
ber for Linux, Unix and Win- 
dows, co-developed by Fujitsu. 
CentriSite combines features of 
Fujitsu's Interstage Business 
Process Manager with Software 
AG's Enterprise Service Inte- 
grator and Information Integra- 
tor to manage SOA metadata 
and help ensure maximum code 
reuse. 

"This becomes the central 
integration point for the entire 
company," said Beack. And 
according to Jim Fowler, the 
company's director of analyst 
and media relations, the release 
of CAI and CentriSite com- 
bines with its middleware to 
make Software AG a complete 
integration tools company. 

"When people think of Soft- 
ware AG, they usually think 
legacy systems.' But the tools 
to build presentations — that's 
the top part of the stack. Now 
we have every piece; we're a 
full integration company." I 
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Free App Analysis for Visual Studio 

Microsoft's security tools go with all VS 2005 editions, not just Team System 



BY JENNIFER DEJONG 

Microsoft plans to give away 
two tools designed to help 
developers write secure appli- 
cations. 



The tools for analyzing 
native code — Application Veri- 
fier and Code Analysis — are 
expected to be available as free 
downloads by year's end, said 



Rick Samona, a product manag- 
er in the developer division at 
Microsoft. 

Neither tool is new. Both 
have been made available earli- 



er as stand-alone offerings, and 
they also are included in the 
Developer edition of Visual 
Studio 2005 Team System. But 
the free downloads will for the 



"In some projects we have five simultaneous 
database environments to keep in synch. I 
downloaded the SQL tools from Red Gate and the 
next 14 days were the best SQL days in my life," 



G. Haraldsson Kaupthing Bank 



"SQL Compare and SQL 

Data Compare synched 

30,000 product lines and 

the 1 2 associated tables 

in less than 20 minutes - 

a task that takes the 

best part of a day 

manually!!! Go try it and 

buy it NOW." 



"I am literally staggered at how much more 
efficient it is to perform simple data transportation 
with SQL Data Compare. In some cases, it is up 
to 1 times faster with SQL Data Compare than it 
would be with DTS." 



Nick Stansbury SAGE Partners Ltd 



Paul Cooke Bortec IT Ltd 



"SQL Packager 

rocks! It took me 

longer to write this 

post than it did for 

me to copy a 

database located 

on a 3rd-party 

web host. 



"Simple to use, powerful, 
fast - awesome. I have never 
written a testimonial before, 
but I felt compelled to 
do so in this case." 



"SQL Compare and SQL Data Compare are 

the best purchases we've made in the 

.NET/S QL environment.. .We rely on these 

products for every deployment." 



Doron Grinstein Technical Director, 
Information Technology, Walt Disney Studios 



Paul Tebbutt Technical Lead Universal Music Group 



David Hayden codebetter.com 



"It's awesome. The 
speed and interface 
improvements have 
made SQL Compare 
the central tool for our 
change control process." 



"There are times that I love 

this business - this would 

be one of them. Because 

without SQL Compare, and 

given 700 rows in sysobjects 

plus 1 3,000 rows in 

syscolumns in the 

production db, it would've 

taken me hours upon hours 

to find. ..Now, what to do 

with the rest of my day :-)" 

Mark McGinty Database Analyst/Consultant 



Marius Roets Woolworths 



productive developers 

The Red Gate SQL Bundle Developer Edition makes developers happy. 
Instead of wasting time writing tedious updates, they're creating time for the 
important stuff. IT Managers are even happier, because projects come in 
ahead of time and under budget. With our acclaimed tools you can automate 
all your SQL Server chores. Now, what to do with the rest of your day? 



sql bundle 



Download your free, fully functional, 14-day tri 



www.red-gate.com 
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first time make them available 
in all editions of Visual Studio, 
Samona said. 

Application Verifier, which 
originally shipped as part of 
the Application Compatibility 
Toolkit, is essentially a set of 
runtime tests for detecting exe- 
cution errors in Visual C+ + . It 
can find, for example, a memo- 
ry leak that is corrupting the 
heap during runtime, he said. 
Code Analysis examines C and 
C++ source code, looking for 
errors such as buffer overruns. 
Vulnerable to exploitation by 
attackers, buffer overruns occur 
when data is pushed into a part 
of memory from which code 
can be executed. Code Analysis, 
earlier included with the 
Microsoft Device Driver Kit, 
doesn't execute code and can- 
not detect all possible errors, 
but it does find errors that the 
compiler may ignore. 

Samona also highlighted 
managed code security tools 
that are included in all versions 
of Visual Studio 2005, includ- 
ing FxCop, which analyzes 
source code looking for things 
such as poor naming conven- 
tions or code that is vulnerable 
to attacks such as SQL injec- 
tions, and Debug in Zone, 
which lets developers test and 
debug an application with the 
same set of permissions that 
will be granted once that appli- 
cation is deployed. Earlier, 
both offerings were available 
only as stand-alone tools, said 
Samona. I 



Purdue University 

Tenure Track 

Faculty Position 

Application Software Development 
Purdue University's Department of 
Computer and Information Technol- 
ogy invites applications for a 
tenure-track position beginning in 
August 2006. The department's 
mission is primarily teaching, 
educational scholarship through 
applied research, and industry/ 
professional outreach. The position 
focus is in the area of application 
software development using con- 
temporary programming languages, 
development tools, and methodolo- 
gies. A complete description of the 
position and application process are 
available at 

http://www.tech.purdue.edu/cit/positions 

Purdue University is an Affirmative Action/ 
Equal Access/Equal Opportunity Employer. 
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Koders.com Engine Searches Out Code for Reuse 

Why reinvent the wheel? Plug-ins point developers to open source 



BY ALEX HANDY 

Koders has updated its IDE 
plug-ins for Eclipse and Visual 
Studio, claiming to help devel- 
opers by pointing to existing 
open-source code that is the 
same or similar to what they 
are writing. 

Darren Rush, CEO of 
Koders, explained his compa- 
ny's vision for open-source 
developers: less work. Koders 
is dedicated to keeping devel- 
opers from reinventing the 
wheel every time they write a 
new program, he said. 

As such, koders.com, the 
company's open-source code 
search engine, has grown 
to catalog more than 225 mil- 
lion lines of open-source code, 
all of which can now be 
searched using the company's 
recently announced IDE plug- 
ins for Visual Studio and 
Eclipse. 

While being able to search 
for what's already been written 
within an IDE is a useful 
enough feature, Rush believes 
that the Koders plug-ins can 
also monitor a developer's 
actions and suggest snippets of 
code that he or she could use 
in given circumstances. 

"Code reuse is something 
that's on everyone's list," said 
Rush. "It's something that 
managers know is important, 
but it's been hard to imple- 
ment." 

Rush said of the monitoring 
capabilities of his company's 
software: "There are certain 
events that occur when devel- 
opers write code; specifically 
we talk in the context of 
object-oriented programming. 
When a programmer creates 
a class or a message, or is 
changing a message signature, 
that gives us a chance to see 
the context of what they're 
working on, take a snapshot 
and check koders.com for 
something." 

'GOOD STUFF' OUT THERE 

For example, Rush said, if a 
developer wants a program to 
calculate MD5, a method of 
verifying the integrity of a pro- 
gram, pointing to some exist- 
ing code that someone else has 
written is very helpful. 

"Developers are becoming 
more aware of other good 
stuff that's out there. Say you 



go in to calculate MD5, so cycle by saying, 'Hey, some- narrow or more broad, if you Eclipse and Visual Studio are 

you spend 15 minutes to an one else has already done it.' find that it's finding too much both available today free of 

hour to calculate it yourself. There's an option to set info." charge from the koders.com 

Koders.com shortens that the level of results to more The Koders plug-ins for Web site. I 
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Security for Those Who Go It Alone 

Scaled-down version of CodeAssure caters to the solo Java developer 



BY ANDY PATRIZIO 

Application security isn't a 
problem just for enterprise 
development teams, according 



to Secure Software, which last 
month introduced CodeAssure 
Solo, a scaled-down version of 
its source-code security check- 



er aimed at individual Java 
programmers. 

CodeAssure Solo checks 
source code for as many as 90 



different types of security 
problems or shortcomings, 
including buffer overflows, 
integer overflows and race 
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conditions (where a user and a 
malicious program are in a 
"race" to access a file first), 
and how the application's 
behavior is programmed. 

It also can examine cryp- 
tography problems, such as 
weak cryptography in a ran- 
dom number generator, or 
misuse of SSL security 

MORE LANGUAGE SUPPORT 

Implemented as an Eclipse 
plug-in, CodeAssure Solo is 
designed for the single devel- 
oper, and supports only 
the Java language, including 
JavaServer Pages. Future 
versions will support Visual 
Studio and .NET languages, 
said Dale Gardner, director 
of product management for 
Secure Software. 

The company is consider- 
ing a version for Perl as well, 
he added. 

CodeAssure also checks for 
input validation errors and 
things that relate to program 
behavior, such as accessing the 
file system or the network 
when it isn't supposed to. 

"Wherever [the program] 
goes — if it goes into a library, 
we'll follow it there," said 
Gardner. This allows the pro- 
grammer to check for back 
doors that may have been 
slipped into the code. 

CodeAssure Solo joins 
Team and Enterprise editions, 
also for Eclipse. Team sup- 
ports Java, C and C + + and is 
designed for collaborating 
groups of developers and 
security specialists in code 
analysis, letting them share 
reports and status information. 
Support for .NET languages is 
planned for later this year. 

CodeAssure Enterprise 
allows for the application and 
enforcement of app security 
analysis, standards and best 
practices across entire or- 
ganizations, including exter- 
nally developed code. This 
way, all code generated 
throughout the enterprise 
is subject to IT policies and 
checks. 

CodeAssure Solo is avail- 
able now for US$399 per 
developer seat for a one-year 
subscription. 

A 10-day trial version can 
be downloaded at www. secure 
software.com. I 
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From Finding to Fixing Vulnerabilities 



Latest release of AppScan offers recommendations for remediation 



BY DAVID RUBINSTEIN 

What Watchfire calls a funda- 
mental shift in the application 
security market has led to a fun- 
damental shift in its flagship 
AppScan testing tool. 

"The original focus of App- 
Scan was how bad a Web site 
was. The success [of AppScan] 
was measured in the volume of 
issues" it uncovered, explained 
Michael Weider, chief technol- 
ogy officer at Watchfire. "In 
2005, the market began to 
understand application security. 
Now the biggest issue was 
struggling to digest the output 
of the product." 

AppScan 6.0, released on 
Dec. 5, helps organizations do 
just that with the addition of an 
automated fix recommendation 
feature that studies the vulner- 
abilities found by the tool and 
generates recommendations to 
help remediate the problems, 
Weider said. "This is a huge 
productivity savings for our cus- 
tomers," he said. 

The testing tool has been 
given an interface lift, with new 



views and trees to help ease the 
process of working through 
security issues, he added. The 
new remediation view provides 
a list of recommended tasks for 
fixing the problems, either for 
the entire application or for 
specific pages or folders. That, 
Weider said, makes it easier for 
project managers to assign 



issues to the developers respon- 
sible for that work. 

Other enhancements include 
increased scanning speed, 
which helps organizations get 
through numerous, large appli- 
cations, and template-based 
scan configuration, which 
enables users to save scan items 
for reuse. Also, users now can 



prioritize changes based on the 
severity of the vulnerability. 

Reporting is one of the most 
important functions of a securi- 
ty testing tool, and Watchfire 
claims that AppScan 6.0 pro- 
vides reporting on more than 
30 regulatory compliance 
requirements, such as Sar- 
banes-Oxley, Gramm-Leach 



Bliley Act and Visa Cardholder 
Information Security Program. 
With hackers finding ever 
newer ways to penetrate an 
application, the new version 
provides vulnerability updates 
daily. AppScan 6.0 costs 
US$15,000 per year on a 
subscription basis; AppScan 
Developer Edition costs 
$1,500 per seat. AppScan DE 
integrates with Visual Studio 
and Eclipse; support for VS 
2005 will be added soon, Wei- 
der said. I 



Serena Relying on ALF 



< continued from page 1 

When Serena's products are 
ALF-enabled, they will be 
"more integrated than they are 
today," said Parker, but he did 
not offer further details. 

The combined offering will 
include RTM and Dimensions, 
Serenas change management 
solution, said Piwonka. He did 
not say whether TeamTrack, 
Serena's issue management 
tool, would also be part of the 
suite, nor did he make further 
details of the integrated offer- 
ing available. 

News of the expected prod- 



uct suite followed Serena's 
announcement last month that 
that it will be acquired by Silver 
Lake Partners, a Menlo Park, 
Calif. -based private equity firm 
that invests in technology com- 
panies, for about US$1.2 billion. 
Referring to the company's 
plans for an integrated suite, 
Evan Ellis, Serena's chief operat- 
ing officer said: "A fundamental 
reason to go private is that it lets 
us deliver on that vision faster." 

MORE SUPPORT FOR ALF 

Serena, which has played an 
evangelizing and managerial role 



with ALF, expects to allocate 
more resources to the project. 
Tracy Ragan, CEO of Catalyst 
Systems, an ALF contributor, 
said Serena has not contributed 
to the core ALF framework. 

ALF, which got under way 
last summer, aims to eliminate 
the need to hand-code integra- 
tions among different tool mak- 
ers' offerings. 

Catalyst is focusing its ALF 
effort on readying the integra- 
tion component for interfacing 
with tools such as OpenMake, its 
build management offering, said 
Ragan. OpenMake needs to 
share information with virtually 
every application life-cycle tool 
out there, she said. 



ALF is expected to provide 
the way to do that, said Andre 
Pino, chief marketing officer at 
Lexington, Mass. -based Segue 
Software, an ALF member 
that develops quality manage- 
ment tools. 

For instance, a test manage- 
ment tool must understand 
when a new requirement is 
added, so that the testing tool 
can start the process of building 
test plans around that require- 
ment, he said, offering an exam- 
ple. "If you [attempt to] define 
something more specific, you 
have to get all the vendors to 
agree," said Pino. "But if you 
keep it lightweight and generic, 
it's easier to coexist." I 
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Amberpoint Policy-Based Filtering for SOA 

Beefed-up security in Management System 5.0 lets developers police policies 




Amberpoint's security software can 
run on autopilot, says Horst. 



BY ALEX HANDY 

Oakland, Calif. -based Amber- 
point will release version 5.0 of 
its Amberpoint Management 
System, a runtime and gover- 
nance suite for SOA applica- 
tions, sometime before the end 
of the year. New to this version 
is a policy-based filtering and 
monitoring system that allows 
users to keep track of and con- 
trol the traffic that flows across 
their SOA deployment. 

Ed Horst, director of mar- 
keting at Amberpoint, said the 
new version should help SOA 
managers get a handle on com- 



plex systems. "When you're 
managing a system, you can set 
a policy such as: 'All of my 
order information needs to be 
encrypted.' How did that get 
[to be] assigned to the right 
place and enforced at runtime? 
The policy system that we have 
[has an] autopilot capability." 

Horst gave further examples 
of policies that could be used 
within the system. "Apply this 
encryption policy where these 
conditions are true, where the 
service is deployed in a 
Web Logic container, or where 
the service is in production 



instead of in testing," he said. 
"Once you've defined these 
things, as the conditions around 
these services change, the poli- 
cies automatically get applied. 
As soon as a service is deployed 
and its status says it's [ready for] 
production, all the policies are 
applied to it, for example." 

Also new, said Horst, is a 
revamped security system. 
"We've typically seen censorship 
and crypto as typical security 
policies. Rather than having to 
build them one at a time, you 
pick them out of the library, 
answer the questions, and you're 



good to go," he said, adding that 
the tool gives developers visibili- 
ty into incoming requests and 
the outgoing responses. "Often, 
we see data that's got compliance 
issues, so you can go through and 
tell the system to suppress those 
pieces of information, [or] you 
can selectively filter the informa- 
tion that we log." 

Amberpoint Management 
System 5.0 is expected to be 
generally available by year's 
end, Horst said, adding that it 
will cost US$50,000 per server 
processor, with a typical installa- 
tion costing around $150,000. I 



Mindreef Bridges Web Services Islands 



< continued from page 1 

the construction and mainte- 
nance of Web services regard- 
less of their technical skill level. 

The browser-based platform 
runs atop Apache's Tomcat 
servlet engine and Microsoft's 
SQL Server Desktop Engine 
(MSDE), both included in 
the platform's price of US$499 
per concurrent user per year 
(there's a two-seat minimum). 

Coral consists of four main 
components: Foundational Gov- 
ernance permits creation of the 
WSDLs and schema that ensure 
adherence to corporate policies 
and custom rules through all 
phases of development and 
deployment. Multirole Testing 
includes functional, regression 
and interoperability testing 
capabilities that are usable by 
any department and role. Col- 
laborative Diagnostics offers 
deep analysis of Web services 
through platform-native SOAP 
traffic collectors and Web ser- 
vices simulation for offline test- 
ing. Life-cycle Support handles 
ongoing application mainte- 
nance and end-user documenta- 
tion and support. 

According to Jim Moskun, 
Mindreef s chief strategy officer 
and one of its founders, in order 
to implement a service-oriented 
architecture across an organiza- 
tion, technical and nontechnical 
people from multiple depart- 
ments and roles must collabo- 
rate. "We approached it in a way 
that would be useful to business 
analysts, but also let you drill 
down [to the code level] if 
you're an architect or service 
developer." 



Mindreef president and co- 
founder Frank Grossman 
described how the governance 
module might work. "A com- 
pany might need to follow 
WS-I kinds of rules, or [dictate 
that] 'our namespaces need to 
follow these rules.' These 
kinds of things can be coded 
into Coral" by nontechnical 
people. WS-I's Basic Profile 
1.0 and other best practices 
are built in. "A coder would 
then create the service and the 
WSDLs for using that service. 
Then they bring it into Coral 
so all can see that it conforms 
with the rules." 

Once schemas are created, 
Grossman said that Coral also 



helps communicate the pur- 
pose of the system's XML- 
based applications to the non- 
technical members of the 
team. "Coral generates the 
pseudocode and other things 
that help people understand 
what the service is and sup- 
posed to do." And simulation 
permits Web services testing 
from a WSDL. "This way peo- 
ple can play with that service 
before any code is written and 
understand what it's really 
about." 

When it's time to begin writ- 
ing code, Grossman continued, 
the service developers can use 
their normal development 
tools. "They're able to create 



unit tests as they go along inside 
the Coral server. Instead of pre- 
tending they're the client, they 
can use Coral as the client," to 
test and debug the service as it's 
being built, he said. 

The benefits of collabora- 
tion become apparent, Moskun 
said, as services go into beta 
testing and production, partic- 
ularly when those services 
depend on another part of the 
company to run. 

"As things get more separat- 
ed, the need for collaboration 
gets more important," asserted 
Grossman, of the increased need 
for cooperation among depart- 
ments brought about by SOA. 
"When someone finds a prob- 



lem, Coral will contain every- 
thing needed to reproduce the 
problem and everybody can look 
at it from the same point of view. 
No matter whether it's a C++ or 
COBOL program, they can 
understand it in the same way," 
added Moskun. He said that in a 
typical installation, a company 
will deploy one Coral server in 
each department participating in 
the Web service(s). 

Available now, Coral has 
been tested only on Windows 
servers, but Moskun said the 
all-Java solution should theoret- 
ically run anywhere. The soft- 
ware also may be licensed for 
$1,500 per user plus 18 percent 
annual maintenance. I 



Contivo Builder Abstracts XML Schemas 



BY EDWARD J. CORREIA 

Anyone that has looked at an 
XML schema knows it's not a 
pretty sight. Claiming to have 
found the missing link between 
the XML schema and the Eng- 
lish language is Contivo, which 
on Nov. 28 unveiled Contivo 
Builder 2.0, the first commer- 
cial release of a tool it says 
brings schema building out of 
the Stone Age. 

"The XML schema is a very 
difficult thing to understand. 
Most tools just throw it in your 
face," said Contivo CTO Dave 
Hollander. "We take all that 
away. We let the people who are 
responsible for their informa- 
tion and understand the busi- 
ness requirements generate the 
schemas needed to implement 
those requirements," he said. 



The tool also helps guarantee 
schema consistency. "Builder 
takes schemas from being a 
handcrafted activity to being an 
automated process. Most 
important, it becomes some- 
thing that a lot of people can 
do — such as nondevelopers — 
by making it much easier to do." 

Hollander served as co-chair 
of the working group that creat- 
ed XML. He said the process 
was a little like herding cats. 
"Cats with very big claws. We 
met every six weeks, and all the 
big companies were there repre- 
senting their interests, their 
developers and a large range of 
technology [requirements] we 
needed to meet." The result, he 
said, was a language that many 
view as extremely difficult to use. 

"Making it easy for develop- 



ers to use was never the goal," 
he said. "For anything you need 
to express, there's at least three 
ways of expressing it." 

Builder eliminates that 
problem, he said, by abstracting 
schema complexity in the tool 
itself; it's not an object broker 
or middleware solution. 

The US$499-per-seat tool 
provides a drag-and-drop envi- 
ronment for capturing business 
requirements and information 
components, such as customer 
name and address and a techni- 
cal description of how objects 
are defined. These are published 
as vocabularies and can be saved 
to a shared volume. "I don't have 
to understand everything about a 
customer and the nuances of 
how it's represented in the data- 
base. I just grab the component 




The XML specification wasn't 
designed to be easy for developers, 
says Contivo's Hollander. 

customer' and drop it into a new 
service I'm developing for read- 
ing in customers." 

Contivo will add a repository 
feature in early 2006 when it 
releases Vocabulary Manager 4, 
the next version of its XML 
vocabulary tool. I 
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MDS Studio Makes WSDL Come True 

Research In Motion tool converts Web services to Blackberry executables 



BY EDWARD J. CORREIA 

For developers who have 
wished the time they spent ser- 
vice-enabling enterprise appli- 
cations could be applied to 
mobile devices without addi- 
tional code, Research In 
Motion may have a solution. 

The Blackberry creator in 
November released MDS Stu- 
dio, a free add-on to its Enter- 
prise Server 4.0 that converts 
WSDL files into executables for 
its Blackberry handheld com- 
munications devices. MDS Stu- 
dio is a stand-alone implemen- 
tation of Eclipse; a plug-in 
version is expected next year. 

David Heit, RIM's senior 
product manager, demonstrat- 
ed the new point-and-click tool 
during a visit to SD Times. A 
developer first points to or 
enters the URL of a WSDL and 
imports it. The WSDL contains 
descriptions of the service's 
inputs and outputs, which the 
tool converts into an application 
prototype. Developers can then 
modify the locations, labels and 
properties of interface objects. 

"What comes out is a client 
for that service that runs on the 
Blackberry, complete with action 
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RIM's drag-and-drop environment enables Web service client creation from WSDL files. 



buttons and blank input fields," 
said Heit. Once tested, the app 
can be pushed to Blackberry 
devices or published in a reposi- 
tory using RIM's existing deploy- 



ment architecture. A new device 
runtime executes the applica- 
tions, displays repository items 
available for download, and han- 
dles installation and removal. 



"Looking at WSDL gave us 
the idea," said Heit, whose demo 
also exhibited far faster perfor- 
mance with the newly created 
Web service executable than 



running the same service 
through Blackberry's browser. 
"That's because all the execution 
logic is local," and all that's being 
sent over the air is the query and 
response. The solution is offered 
as a third option for Blackberry 
developers currently deploying 
Java and browser-based apps. 

In addition to faster perfor- 
mance, the new solution allows 
integration with other Black- 
berry apps. "I can bring up an 
address from a public directory 
and automatically paste it into 
my address book. You can't do 
that from the browser. This lets 
you deploy rich applications to 
a device, and to rapidly create 
prototypes without any coding," 
Heit said. "Companies don't 
have to have any experience 
with Java or C#," he added. 

MDS Studio will be bundled 
with Enterprise Server 4.1 
when it's released in January 
2006. That solution also will 
add role-based administration, 
group security and policy set- 
tings, and compatibility with 
instant messaging servers from 
IBM, Microsoft and Novell, 
Heit said. Version 4 is priced at 
US$3,999 for 20 users. I 



Vertical Platforms From Green Hills Target Medical, Military 



BY EDWARD J. CORREIA 

Green Hills Software in Novem- 
ber released a series of software 
bundles built around its Integrity 
RTOS that target specific indus- 
tries and applications. Each bun- 
dle also includes the company's 
Multi development environ- 
ment, and integration with 
industry-specific middleware 
and hardware reference designs. 

Two of the platforms, for 
avionics and medical, are aimed 
at developers of life-saving 
medical devices and systems 
used in military and defense 
equipment. The company also 
released platforms designed for 
wireless, automotive and indus- 
trial control systems. 

One benefit of the plat- 
forms, according to David 
Barnett, director of product 
marketing at Green Hills, is 
the inclusion of a real-time 
operating system that has been 
precertified for use in the tar- 
get industry by the appropri- 
ate governing body. "A cus- 
tomer does not need to 



recertify the operating system 
that we provided." 

The Green Hills Platform 
for Industrial Safety is certified 
to conform to IEC 61508 spec- 
ifications published by the 
International Electrotechnical 
Commission for flame, gas and 
temperature sensing and other 
devices. For life-critical med- 
ical devices such as infant 
warmers, pacemakers or any- 
thing implantable, the Platform 
for Medical Devices conforms 
to the FDA's 510(k) spec and its 
more stringent premarket 
approval process. The Platform 
for Avionics supports DO 178B 
and ARINC 653-1 specs, and is 
available with C/C++ or Ada 
languages. The Platform for 
Software Defined Radio (SDR) 
supports Software Communica- 
tions Architecture specs, in- 
cluding CORBA and POSIX 
compliance. 

FAIL-SAFE FILE SYSTEM 

Green Hills in November also 
released the Partitioning, Jour- 



naling File System (PJFS), a 
crash-safe file system that it 
claims can protect devices from 
failures and poor performance 
due to improper shutdown. PJFS 
is included with the SDR plat- 
form, and optional for others. 
Barnett said that PJFS- 



equipped devices that are 
improperly shut down can 
recover faster than other operat- 
ing systems when restarted. "In 
the event of a crash, Linux and 
Windows have to go back and 
check for file integrity, [adding 
to] start-up time after a failure." 



PJFS also permits secure 
partitioning of a disk or flash 
memory, preventing insecure 
communications between appli- 
cations. "This lets you strictly 
control which applications can 
access which partitions on a 
disk." I 



Nokia to Acquire Intellisync 



BY EDWARD J. CORREIA 

Nokia has agreed to acquire 
Intellisync, which develops 
enterprise and carrier e-mail 
and data synchronization solu- 
tions for mobile devices. In an 
all-cash deal, Nokia will pay 
about US$430 million, or $5.25 
per Intellisync share. The 
acquisition is expected to close 
in early 2006. Intellisync 
employs about 450 people and 
is headquartered in San Jose. 

Intellisync offers solutions 
for synchronizing mobile device 
data with back-end systems 
from BE A, IBM and Microsoft, 
as well as for IMAP and POP 



e-mail systems. The tools sup- 
port a variety of mobile devices, 
including Blackberry and those 
running Palm OS, Symbian OS 
and Windows Mobile. 

According to Charles 
Chopp, product marketing 
manager at Nokia, the deal will 
allow the company to step up its 
mobile tools solutions beyond 
its current range of the small- 
and medium-sized enterprise. 
"With Intellisync's ability to 
interact with any device, you 
can implement something 
across a large enterprise no 
matter what their thought 
process is on how to mobilize. 



This will give us the scope, tools 
and integration capabilities to 
offer a package for any size 
business." 

With a majority stake in 
Symbian, which develops one of 
the world's most ubiquitous 
mobile operating systems, 
Nokia stands to own the syn- 
chronization technology behind 
some of its largest competitors, 
including Access (formerly 
PalmSource) and IBM. Chopp 
said this will be a non-issue. 
"There's a constant moving of 
relationships in this industry. 
Sometimes you collaborate, 
sometimes you compete. But 
the acquisition was not a control 
issue; it was [Nokia] wanting to 
strengthen its offerings." I 
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Always-on computing is set to 
arrive any time now, according 
to tech optimists shouting from 
the mountaintops. Word is that, because 
of expanding spheres of wireless broad- 
band availability and more powerful 
mobile devices, the era of cubicle-only 
access to applications, even big enter- 
prise databases, is poised to pass away 
for good. 

Yet Walt Tallman is bemused by these 
claims. Tallman, senior mobility integra- 
tor at the North Carolina Department of 
Transportation, supports a mobile data- 
base application used by the state's 
bridge inspectors. Armed with tablet 
PCs and digital cameras, the inspectors 
look after thousands of structures from 
the remote eastern part of the state to 
sparsely populated coastal regions. 

"North Carolina has lots of moun- 
tains where it's impossible even to get 
cell phone coverage," said Tallman. 

A maturing market for mobile data- 
bases that work online or off is in many 
ways the bridge to the always-on future, 
which many less-optimistic analysts and 
technologists say is still many years or 
even decades away. 

The market is crowded with the usu- 
al list of big database sellers and a slew 



of emerging companies focusing on spe- 
cific industries, such as voice-over-IP 
telephony, or technical capabilities, such 
as embedding everyday desktop soft- 
ware into customized, distributed enter- 
prise applications. Big questions hover 
above this fray as well, including the 
place of Linux and the effects of a slow 
turn away from client/server, toward a 
Web-centric, software-as-service com- 
pute model. 

Despite the complexities, however, 
most agree on a straightforward handful 
of best practices associated with build- 
ing and maintaining a mobile database 
for occasionally connected, field-based 
workers. 

SYNC'S THE THING 

Breck Carter, a consultant who used 
Sybase SQL Anywhere Studio Mobi- 
Link technology to design and imple- 
ment the database synchronization fea- 
ture of the North Carolina bridge 
inspector application, said that 100 per- 
cent automation of the synchronization 
process tops the list of essential mobile 
database features. 

"It may be appropriate for a user to 
click on a 'synchronize now' button, but 
even that shouldn't be necessary if a reg- 



ular schedule is more appropriate," said 
Carter, author of the "SQL Anywhere 
Studio 9 Developer's Guide," published 
in September 2004. "Any higher level of 
end-user involvement should not be 
required." 

Carter said other essentials include 
transmission protocols that send data 
without a lot of extra overhead or an 
excessive amount of handshaking, the 
ability to handle dropped data connec- 
tions without any special recovery activ- 
ity, and synchronization support for 
full-fledged relational databases, not 
just flat files or spreadsheets. 

Combining big, multitable relation- 
al databases with tiny mobile devices 
may seem a daunting proposition. In 
many cases, mobile devices don't need 



and can't hold all the data held in a 
back-end data repository — the reason 
other technologists point to the neces- 
sity of dynamic and highly programma- 
ble APIs. 

"When developing the application 
on a mobile database, the developer 
needs to have complete control over 
the data, including when and where it is 
replicated, and how conflicts between 
modified and replicated data from dif- 
ferent locations are resolved," said Ali 
Paasimaa, head of the Americas con- 
sulting practice for Solid Information 
Technology, which provides databases 
for telecommunication networks, med- 
ical devices and transportation fleet 
management systems. 

► continued on page 30 
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< continued from page 29 

With this increased control and power, 
of course, comes greater responsibility to 
rethink conventional software design pat- 
terns. For example, order entry databases 
often generate records that count up 
sequentially, an approach that won't work 
when orders are entered into any number 
of disconnected devices that only later 
update a central application. 

Another example is a hypothetical 
field salesperson who checks out a set of 
orders for a given customer, updates the 
orders while disconnected, and then 
checks them back in when reconnected 
to the network. 

"Normal locking schemes obviously 
won't handle this situation, so something 
programmatic is required," said Neil 
Powers, vice president at the OpenEdge 
division of Progress Software, which 
offers an Eclipse-based integrated 
development environment for finance, 
health-care and other compliance- and 
audit-heavy industries. 

BIG FOUR ON THE MOVE 

The database industry's heavy hitters fig- 
ure prominently in any discussion of cor- 
porate or government users who access 
business applications away from the 
office. The big four — IBM, Microsoft, 




'On-demand computing is the 
biggest opportunity for those 
companies with the 
smallest install 
bases today.' 



—Jack Gold, founder 
and principal, 
J. Gold and Associates 

Oracle and Sybase — each touts the abil- 
ity to extend database functionality to 
the edges of nearly any network. 

Of the four, there's little disagree- 
ment that Sybase subsidiary iAnywhere 
has the biggest share of the enterprise- 
ready mobile database market. 

"And they're No. 1 by a substantial 
margin," said analyst Jack Gold, founder 
and principal of J. Gold and Associates. 

In August, Sybase demonstrated 
Jasper, the code name for the next edi- 
tion of the SQL Anywhere mobile data 
management and synchronization solu- 
tion. Jasper includes new failover capa- 
bilities through server mirroring, mate- 
rialized views to make it easier for 
developers to specify and store precom- 
puted query results, and additional mon- 
itoring tools to identify bottlenecks. 




IBM's mobile database is DB2 
Everyplace, a lightweight version of the 
same database that grew up on the com- 
pany's zSeries mainframe servers. DB2 
Everyplace makes use of IBM technolo- 
gies such as WebSphere Information 
Integration software, which manages 
diverse and distributed data with enter- 
prise search, SQL and Q replication, and 
data and content federation. 

"DB2 Everyplace is really all about 
providing a mobile platform that IBM 
Global Services can use," said analyst 
Tony Rizzo, sector head of mobile tech- 
nology at The 451 Group. "It's most 
common in true [IBM] shops." 

Oracle, which beat IBM to market in 
1979 with the first commercial product 
to use SQL, seems to be lagging the 
pack with Oracle Lite, its database for 



mobile, occasionally connected users. 
Like IBM's apparent affinity for its own 
computing environments, Oracle Lite 
appears tightly integrated with Oracle 
back-end databases. 

"Oracle suffers from a 'show me' 
problem," said Gold. "In the mobile 
space, the company has really yet to 
show significant numbers of deploy- 
ments." 

Indeed, the first two hits in a Google 
search for "Oracle Lite success stories" 
are customer examples from the iAny- 
where Web site. 

Microsoft's mobile database business 
has similarly languished, even according 
to the company's own engineers. When 
asked about SQL CE 2.0, the forerunner 
to its newest small footprint database, 
Microsoft's SQL Server program manag- 
er, Durga Gudipati, said that there are 
"not many implementations yet." 

Yet there are several reasons to sus- 
pect that Microsoft's mobile database 
fortunes may be changing. For starters, 
though, the company has been dabbling 
in mobile operating systems since the 
early 1990s. The 451 Group's Rizzo said 
that it wasn't until the 2002 launch of 
Windows CE 4.0 that Microsoft had its 
first serious mobile operating system. 

"And Windows Mobile 5.0, released 
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earlier this year, is much better and gain- 
ing real traction," said Rizzo. 

The new SQL Server 2005 Mobile 
Edition, included in Microsoft's Nov. 7 
mega-launch of SQL Server 2005, Visual 
Studio 2005 and BizTalk Server 2006, 
allows developers to create a mobile data- 
base using SQL Management Studio. 

Other new features include SQL 
Server Mobile s ability to handle multi- 
user access and data synchronization 
and a Smartphone emulator built into 
Visual Studio 2005. 

"Whether you're writing for the 
.NET Compact Framework, or writing 
native code in Visual C + + , you can test 
your code in the emulator, which looks 
and feels like a real device," said Gudi- 
pati. 

Microsoft's mobile database business 
also may benefit from the shift toward a 
services-oriented, on-demand compute 
model, perhaps best embodied by Sales- 
force. com, but also by OpenOffice and 
Google. This is paradoxical, since the 
turn away from client/server computing 
is widely seen as a threat to other estab- 
lished Microsoft product lines, including 
Office and even Windows. 

SQL Server CE/Mobile deployments 
remain scarce, and "on-demand com- 
puting is the biggest opportunity for 



those companies with the smallest install 
bases today," said Gold, adding that in 
another few years, because of 
Microsoft's slow but steady mobile 
momentum and the move to services- 
oriented computing, Microsoft may be 
in the best position of the big four data- 
base vendors. 

WHITHER LINUX? 

No Microsoft story is complete without a 
vexing open-source subplot, a maxim 
that holds true in this mobile database 
tale as well. 

Gold and Rizzo said there are many 
open-source mobile database projects 
under way, including the IBM Cloud- 
scape small footprint database server. 
But the analysts said there are few 
notable deployments, both because of 



the conservatism of CIOs and the still- 
immature mobile Linux ecosystem. 

A Nov. 14 announcement by a con- 
sortium of companies working on Linux 
telephony may be an antidote to these 
concerns. The Linux Phone Standards 
Forum, or LiPS, hopes to standardize 
Linux-based services and APIs and oth- 
erwise accelerate the adoption of Linux 
in fixed, mobile and converged devices. 

"With regard to how LiPS will affect 
what's happening in the world of mobile 
databases running on the Linux plat- 
form, particularly databases that need to 
work in occasionally connected fashion, 
LiPS' main mission is to fight fragmen- 
tation at the application level," said LiPS 
board member John Ostrem, founder 
of China MobileSoft and lead scientist 
for Palm Source, one of the founding 





UPS' main mission is to 
fight fragmentation at the 
application level.' 



—John Ostrem, 
founder, China MobileSoft 
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companies of the LiPS Forum and now 
a subsidiary of Access. "In essence, LiPS 
will work to achieve interoperability 
between smart phones, from low end to 
high end, and Linux enterprises." 

Meanwhile, other big industry play- 
ers are at work to blanket the globe with 
broadband wireless signals, which may 
eventually squelch the need for offline 
functionality of any sort. In early 
November, chip giant Intel announced 
the actual or planned deployments by 24 
carriers, Germany to Guatemala, of 
fixed WiMAX networks based on Intel 
technologies. 

Yet in many parts of North Carolina, 
including the Smoky Mountains and the 
Outer Banks, always-on computing and 
communication is still decades hence, 
while the sometimes urgent need for 
mobile, occasionally connected data 
entry and data management is here 
today. 

"There are about 19,000 bridges and 
culverts in North Carolina that need to be 
inspected on a regular basis, and there 
are about 60 field inspectors doing that, 
including four teams who work underwa- 
ter," wrote Carter in a case study describ- 
ing his work in the Tar Heel State, adding 
with presumed understatement that 
"[t]hose inspectors are very busy taking 
notes and photos in the field." 

Without wireless connectivity, their 
need to manage mobile data online and 
off is now. I 
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EDITORIAL 

Platform Updates 

The two dominant runtime environments of our 
time — .NET and Java — are taking steps forward. 
These are evolutionary, not revolutionary, but the changes 
should benefit developers. 

Last month, Microsoft released .NET Framework 2.0 
as part of the SQL Server 2005 and Visual Studio 2005 
launch. The changes are fairly incremental: better sup- 
port for generics, for example, as well as beefed-up secu- 
rity, new facilities for Windows Forms, and new library 
functions in ASP.NET, which is the Web application serv- 
er part of .NET 

The small number of changes between .NET 1.1 and 
.NET 2.0 indicates how rapidly Microsoft's platform has 
matured, and indeed, the company has given no indica- 
tion or hint of bigger changes in the future. This should 
be welcome news to .NET developers who wish for 
a stable platform for building and deploying applica- 
tions. While there will be new APIs and other changes 
for Windows Vista, it seems that Windows developers 
can exhale and begin working with their new tools and 
platforms. 

Java, being an older platform than .NET, reached 
maturity sooner, and that's why Sun's goals with Java 
Enterprise Edition 5 are focused on making develop- 
ment easier, rather than adding new functionality to the 
platform itself. For example, the JSR 175 metadata 
facility for the Java language, already added to J2SE 5.0, 
will be a welcome addition in the Java EE 5.0 release; it 
makes it easier to associate metadata tags with complex 
classes, interfaces, methods and fields, thereby helping 
tools and runtimes to automatically understand the con- 
text of those programmatic constructs. 

Java EE 5 also continues the trend toward interactive 
rich-client Web applications, through the use of 
JavaServer Faces, and continues streamlining the com- 
plex array of Web services specifications supported by 
Java application servers. Now at the proposed final draft 
stage, the Java EE 5 spec is set for release in the first 
half of 2006. 

We commend Microsoft, and also the Java Commu- 
nity Process expert group working on Java EE 5, for 
focusing on evolutionary changes. Both platforms have 
strong support from enterprise developers, who quite 
frankly need to get on with their work. By simplifying 
software development, versus reinventing the runtimes, 
both sets of platform designers are implicitly acknowl- 
edging that the last thing the world needs right now is a 
new runtime, or a reinvented runtime. 

While everyone appreciates fine tuning, as well as the 
simplification of developer APIs, the platforms weren't 
broken. We're glad that Sun and Microsoft largely left 
well enough alone. 

If only the same were true of Sony BMG Music Enter- 
tainment. The much-reported fiasco with the company's 
buggy digital-rights management system, licensed from 
First 4 Internet, proves that sometimes the cure is worse 
than the disease. By not thoroughly testing the DRM soft- 
ware, and by installing it without giving its customers 
informed choices, Sony crossed the line. Let that be a les- 
son for us all: Whenever we install code on a client PC or 
server, we introduce potential security flaws. Don't let it 
happen to you. I 



Why Commercial SCM Tools Are Better 



Your organization has a core 
competency that has a 
direct bearing on your compet- 
itive advantage. The more of 
your time you can spend lever- 
aging your core competency — 
whether it is financial transac- 
tions, network protocols or 
something else — the more you 
can enhance your competitive 
advantage. Therefore, it makes 
sense to delegate as much unre- 
lated work as possible. 

Delegation can come in 
many forms, such as third-par- 
ty libraries, outsourced devel- 
opment and automation. When 
considering what to delegate, 
many organizations overlook 
a huge opportunity — software 
configuration management 
(SCM). 

According to the analyst 
firm Ovum, most professional 
developers are still using home- 
grown SCM tools. Homegrown 
tools are either built entirely 
from scratch or more common- 
ly built atop one of the free ver- 
sion-control tools such as CVS 
or Subversion. 

Unlike major open-source 
projects such as Linux, which 
receives corporate support in 
the form of salaried engineers 
from such companies as IBM 
and Red Hat, open-source 
SCM projects receive very little 
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corporate sponsorship. As a 
result, features and innovation 
in the open-source SCM tools 
lag far behind the commercial 
SCM tools. 

Some of the major features 
that are available only in the 
commercial tools are refactor- 
ing (rename operations that 
preserve history and 
merge operations), 
issue-based change 
packages, tight inte- 
gration with issue 
tracking, stream- 
based development, 
caching, replication, 
full support for 
mixed Unix and Win- 
dows environments, 
and process work- 
flow. In addition to these exam- 
ples, there are literally hun- 
dreds of smaller features that 
are available only in the com- 
mercial tools. 

CVS, introduced in 1986 
and now the most popular 
open-source SCM tool, is miss- 
ing not only the features above, 
but also some of the more basic 
features, such as atomic trans- 
actions, fast branching, rename 
tracking and merge tracking. 

In 2000, a group of open- 
source developers (with the 
help of a commercial sponsor, 
CollabNet), set out to address 




this deficit by creating a tool 
from scratch, called Subver- 
sion. Their goals and road map 
do not include the more 
advanced capabilities listed ear- 
lier. In the five years since 
inception, they have accom- 
plished only the first two of 
their four goals, atomic trans- 
actions and fast 
branching. It comes 
as no surprise that 
rename tracking and 
merge tracking are 
still missing from 
Subversion, as those 
are both difficult 
SCM problems that 
are typically either 
part of the original 
architecture or nev- 
er implemented (as is the case 
with CVS). 

Open-source SCM tools are 
written by open-source devel- 
opers primarily to meet their 
own needs. This leaves out key 
constituencies such as release 
engineers, QA and manage- 
ment. The commercial SCM 
tools need to appeal to all con- 
stituencies and thus offer a 
more balanced set of features 
and benefits for the whole orga- 
nization. 

Since most organizations 
require far more than what the 
free tools offer, the organization 
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VIRTUAL OUTSOURCING 

Jennifer dejong's article ["Code 
as High as an Elephants Eye," 
Nov. 15, page 5] was interesting, 
but it needs a lot more work. 

1. There are lots of program- 
mers like myself who prefer to 
live in the boonies and are will- 
ing to work in the $45 range to 
make this happen. 

2. I've submitted my resume 
several times to some of these 
rural development companies 
and never received any kind of 
response. 

3. They are attempting to 
build large-scale environments 
of programmers, which will raise 
the cost of living in the rural area 
and circumvent all that they are 
trying to accomplish. 

The answer is virtual teams 
scattered throughout rural 
America and probably world- 
wide, led by an experienced 
project manager who works 
onsite and offsite. 



We have the technology, and 
because we are not centralized, 
this will not raise our cost to do 
business, which will allow us to 
provide the low-cost, experi- 
enced knowledge that the large 
corporations are seeking by 
outsourcing to India and other 
locations overseas. 

Virgil Bierschwale 

STOP SUGARCOATING 

If Charles Stevenson thinks that 
outsourcing is only restricted to 
companies who need to con- 
centrate on core competencies 
by getting rid of legacy projects, 
think again ["North American 
Developers Must Innovate to 
Keep Jobs," Oct. 15, page 32]. 

My company is apparently 
outsourcing its core competen- 
cy to India. Now, whether or 
not the company can still func- 
tion after this, or will still be in 
business in five years, is a dif- 
ferent matter. Point is, the jobs 



will be gone and probably won't 
come back. 

Please stop trying to sugar- 
coat an activity that is funda- 
mentally stupid and harmful to 
the economies of North Ameri- 
can countries. 

Keith Montgomery 

While Mr. Stevenson makes a 
noble attempt to try to find con- 
structive ways to stem the tide 
of outsourcing/offshoring of 
American technical resources, I 
must disagree with one of his 
fundamental points... innovation 
being the "way out." 

Recently, I was working with 
a U.S. team for a very large U.S. 
bank on a new project. We 
came up with very "innovative" 
approaches to the application 
and had one of the most suc- 
cessful deployments in the 
bank's history. Despite all this 
success, we were thanked and 
then quickly told to mentor a 
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Than Open-Source Tools 



ends up spending a large 
amount of time doing manually 
what commercial SCM tools 
automate. A common result is 
the creation of a homegrown 
tool via automation of some or 
all of this work via scripts using 
the open-source tools as a start- 
ing point. 

REINVENTING THE WHEEL 

Creation and maintenance of 
the homegrown SCM tool 
soon becomes a full-time job. 
Many organizations have small 
development groups dedicat- 
ed to extending and maintain- 
ing the homegrown tool. As a 
case in point, CVS started out 
as a homegrown tool devel- 
oped to automate common 
tasks when using RCS, an 
open-source SCM tool intro- 
duced in 1982. 

It is certainly true that any 
SCM tool will require cus- 
tomization to fit your environ- 
ment. However, there are fewer 
differences between the devel- 
opment process employed at 
different shops than you might 
imagine. I've looked at the 
development process at hun- 
dreds of shops, ranging from a 
single-person shop all the way 
up to 10,000-user shops, 
including ISVs, financial insti- 
tutions, networking vendors 



and governmental organiza- 
tions. The bottom line is that 
source code moves from a state 
of immaturity to a state of 
maturity through a set of stages 
and integration points that is 
similar to an organization chart. 

Creating an SCM tool that 
provides a simple world view is 
hard; customizing the exact set 
of stages and integration points 
is relatively simple. Therefore, 
the amount of effort required 
to customize a commercial 
SCM tool to fit your needs is a 
fraction of what is required to 
build and maintain the equiva- 
lent homegrown tool. 

Homegrown tools tend to 
be built to satisfy current busi- 
ness requirements, and thus, 
they lack the flexibility to 
adapt quickly to changing 
business needs. Reconfiguring 
usually means partial rewrites 
or adding new functionality. 
The need for SCM vendors to 
meet the requirements of 
many organizations requires 
them to design SCM tools that 
easily adapt to a wide range of 
business requirements via cus- 
tomization. When it comes 
time to change your process, it 
is far easier to change cus- 
tomizations in a commercial 
SCM tool than it is to rewrite 
or add new functionality to a 



homegrown SCM tool. 

One large software applica- 
tion company that I've been 
involved with had been doing 
development in a very compart- 
mentalized way whereby each 
group used its own repository 
and different tools were used 
by each group. Shared code was 
copied around, and changes 
were merged together manual- 
ly. Merging changes from a 
maintenance release to a new 
release took three months. The 
company decided to change its 
process to using just one repos- 
itory so that it could benefit 
from tool-assisted merging. At 
the same time, it was acquiring 
new companies and had a need 
to move to a more distributed 
development model. Instead of 
creating a homegrown tool to 
solve these issues, it decided to 
purchase a commercial SCM 
tool. As a result, it can now 
merge changes from one 
release to another in days 
instead of months. 

Another large company cre- 
ated a homegrown tool on top 
of RCS 10 years ago. That tool 
was considered too costly to 
extend and maintain, and three 
years ago, the company decided 
to create a new homegrown 
tool on top of CVS. At this 
point, it has a group of 14 engi- 
neers (in a development group 
of 300) dedicated to extending 
and maintaining the tool, and 
has finally decided to move to a 



commercial SCM tool. The 
company expects to be able to 
redirect the majority of those 
14 engineers from maintaining 
the homegrown tool to concen- 
trating on process improvement 
efforts. 

DON'T GET LEFT BEHIND 

Anybody can realize that faster 
hardware will increase produc- 
tivity, but most companies have 
not yet made the leap to a com- 
mercial SCM tool. That means 
there is an opportunity for com- 
panies to gain competitive 
advantage by adopting a com- 
mercial SCM tool. 

Commercial SCM tools are 
rapidly gaining in popularity. In 
1994, according to IDC, just 
US$173 million was spent on 
commercial SCM tools. In 
2004, $1,062 million was spent, 
with double-digit growth in 
both 2003 and 2004. Looking 
forward, IDC expects this 
growth to continue. 

With this growth has come 
an increase in innovation, both 
from the established vendors 
and from new entrants in the 
market. In short, this is a great 
time to consider stepping up to 
a commercial SCM tool. I 

Damon Poole is the CTO of 
AccuRev, which sells commer- 
cial software configuration 
management software that 
competes against open-source 
tools like CVS and Subversion. 



team in India on what we were 
doing, how we did it and so 
forth, so the bank could pass all 
this wonderful "innovation" off- 
shore. The U.S. team was then 
all but dissolved. Why? Cost, 
plain and simple. The U.S. 
team was just too expensive. 

The fundamental issue here 
is much larger than just IT, how- 
ever. For most large corpora- 
tions, employees are no longer 
viewed as assets. They are 
expenses to be reduced: head 
count, salary, benefits... you 
name it. And that trend has no 
signs of changing. 

Peter Smith 

ATTACK ON ECLIPSE 

In the Oct. 1 article, "Green 
Hills Rolls Dice With Eclipse," 
[page 29] John Bruggeman, 
Wind River's chief marketing 
officer, was quoted as saying 
that "Green Hills has bolted on 
Multi, not integrated it" with 
Eclipse. This is not only a mis- 
representation of our work, but 
also an attack on the fundamen- 
tal precept of Eclipse itself. 



When Will Your Company Begin 
Developing 64-Bit Apps? 

Evans Data has been asking developers this question for 
years, and the resulting historical data has shown a trend 
that has remained flat. 

But in its latest North American Development Survey 
2005, two statistics spiked in opposite directions. 

From fall 2001 through fall 2004, developers with no 
plans to build 64-bit apps hovered at around 45 percent. 
And, companies two years or more away from launching 
64-bit efforts were at around 5 percent. 

But now, the number of shops with no plans for such 
development fell to 22 percent, while those pushing plans 
off for two or more years shot up to almost 30 percent. 
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No plans 



29.7% 

2+ years 



14.6% 

We're already 
doing it / 
5.6% 

10.1% 

6 months to 
a year J 
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years 



Source: Evans Data 



The benefit of Eclipse to 
embedded software developers 
is that it provides a common 
framework into which develop- 
ers can "plug in" (not bolt on) 
tools from different vendors 
and sources. By providing our 
tools as plug-ins, Green Hills 
Software has remained true to 
the Eclipse vision. 

Wind River, on the other 
hand, has implemented its tools 



via proprietary modifications to 
Eclipse. If every vendor took 
Wind Rivers approach, develop- 
ers would have to run a different 
version of Eclipse for each sup- 
plier they were using — putting 
them right back to where they 
were before Eclipse. 

David Barnett 

Director of 

Product Marketing, 

Green Hills Software 



CORRECTION 

In a Nov. 15 supplement to 

SD Times, "Succeed as a Team,' 

a photograph 

identified as 

Ken Cowan 

of Compuware 

was incorrect. 

A photo of 

Cowan appears 

at right. 
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The 100-Year Document 



In my previous column, I discussed the 
need for a common document format 
that can be written and read by all docu- 
ment-generating software. The need for 
such a format is becoming steadily more 
apparent. Government entities have be- 
gun pushing for such a standard because 
they are among the greatest producers 
and consumers of documents. But gov- 
ernments have another problem even 
more intractable: finding a format that 
will still be usable in, say, 100 years. Gov- 
ernment agencies, for obvious reasons, 
need to be able to store and access docu- 
ments for very long periods — certainly as 
long as the lifetime of an old man. The 
question is what kind of document to use. 
Good answers are surprisingly diffi- 
cult to come by. For example, Adobes 
PDF document format would seem like 
a tailor-made solution: It's an open stan- 
dard that renders documents similarly 
on many devices, it's widely supported 
by commercial software, and Adobe pro- 
vides readers for nearly every platform. 
There are several problems with PDF, 
however. The most important is the need 
for a reader. As long as a document cannot 
be displayed without running a program, it 
has a terrible dependency — someone has 
to rev the reader and maintain backward 
compatibility with earlier documents. 



While companies such as Microsoft 
have done a good job supporting older 
formats with their tools, how long such a 
policy will stay in place cannot be known 
barring a contracted commitment. (For 
now, we'll put aside the question of the 
media for storing documents for 100 
years — a difficult problem unto itself.) 

As far as I can tell, Adobe 
has made no announcement 
regarding how long it will guar- 
antee support for PDF files. 
The problem is twofold. If a 
format becomes superannuat- 
ed to the point of no support, 
someone must convert every 
last document in that format to 
a new supported format. 

At a government agency, 
this task is truly impossible. 
Moreover, it's not clear that converted 
documents will maintain their integrity: 
Does the converter understand all the 
nuances of the old format? And if so, will 
all the details be converted and supported 
correctly in the new format? 

For this reason, some advocates are 
suggesting that long-term document for- 
mats use XML. Because XML uses UTF- 
8 (which is an 8-bit method of encoding 
Unicode characters), these advocates rea- 
son, the content of the document will 
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always be available organoleptically, not 
only for searching but also for rendering. 
While it is true that XML gets rid of the 
requirement of a reader to access docu- 
ment text, this benefit as it currently exists 
is severely limited. 

Let's take the best-case scenario: docu- 
ments that are all simple text, such as 
depositions and similar docu- 
ments. These files are still 
dependent on a metadata 
scheme that identifies the nec- 
essary elements in such a way 
that in 100 years, someone can 
intelligently recreate the actu- 
al transcript. (For example, 
what happens if the transcript 
contains a reference to, say, 
page 28? Does the metadata 
have sufficient data that the 
nning and end of page 28 can be 
known for sure when the document is 
rendered in 100 years?) Any such meta- 
data has to be included with the XML 
document; today, the document and 
the metadata are frequently separate files. 
Next, the metadata's own format has to 
be explained in some third document. 
Anyone looking at an XML schema today 
knows the kind of opacity these docu- 
ments have and the uselessness of the 
data without this separate reference. 



Now, let's examine a worst-case sce- 
nario: a form. Here a "y" or an "n" is a 
meaningless piece of text. Clarifying its 
meaning entails knowing where it's placed 
on the document and the context of that 
particular field. So, you cannot tell what 
data you've accessed via XML unless you 
understand the metadata and that meta- 
data contains sufficient information that 
you can — drat! — render the document 
and see for yourself what the field really 
means. Between page references and 
form controls, we are inescapably back to 
rendering the document — XML or not. 

What is the answer, then? Really, 
everything hinges on finding an organiza- 
tion that can define a sensible and com- 
plete way of describing a document, such 
that it can be understood without being 
rendered. The alternative is a similar for- 
mat with some kind of guarantee that ren- 
dering software will be available for, say, at 
least 100 years. The only institutions capa- 
ble of delivering this kind of technology 
commitment are governments. I believe 
the U.S. government or the European 
Union needs to meet with a vendor con- 
sortium to devise the format and then 
commit to writing and maintaining the 
technology to render all documents in the 
format for the required duration. Only 
then can we say that paper truly has been 
supplanted as the archival medium. I 

Andrew Binstock is the principal analyst 
at Pacific Data Works. 
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Getting Over the XAML Hump 



It's pronounced "zammel," not "camel," 
but still there's a hump. I've finally 
programmed my first programs using 
Windows Presentation Foundation 
(WPF), the API formerly known as 
Avalon (and that, I promise, is the last 
time I will clarify that in this column). 
XAML is confusing, boy. My first efforts 
reminded me, if not of the utter incom- 
prehensibility of Windows 3.0 in C, at 
least of the first days of MFC. It is defi- 
nitely book-open-on-the-lap, type-the- 
code-as-you-go sort of work. 

The book, in this case, is Chris Sells 
and Ian Griffiths' "Programming Win- 
dows Presentation Foundation." Sells 
and Griffiths are two top-notch authors, 
who separately wrote two of the better 
books on Windows Forms. This book, 
published by O'Reilly and adorned with 
a Kudu engraving, probably does about 
as good a job as possible in introducing a 
new display framework that is intended 
to replace, well, everything from User to 
GDI to GDI+. And, it seems clear, to 
replace Flash as well. 

Sadly, one 400-page book is insuffi- 
cient to crack the WPF nut. For one 
thing, the API is still evolving quickly, and 
more than a few of the books' listings did 
not work despite slavish copying. I still 
haven't witnessed WPF's support for 



3D, even though I'm more than com- 
fortable with Direct3D. Most important, 
though, WPF is just plain huge. In addi- 
tion to the drawing primitives and events 
and familiar concepts, there are also 
timelines and storyboards and attached 
properties and content models and... it's 
a lot to learn. 

Also, true mastery of WPF 
involves not just one, but two 
programming models. First, 
there's the managed API. 
Good oP objects. Second, 
there's XAML, the Extensible 
Application Markup Language. 
The markup stuff is mostly 
straightforward; the extensible 
stuff is pretty twisty. The 
"property element syntax" 
takes a couple of readings to 
understand, the "attached property syn- 
tax" takes some puzzling, and the "map- 
ping syntax"? I'm still working on that. 

XAML is extremely wordy, which is 
fine in a markup language. Everyone 
expects the vast majority of XAML to be 
produced by tools. I tried Microsoft's 
Acrylic illustration tool, which is derived 
from the Creature House Expressions 
product acquired in 2003. Acrylic will be 
paired with Sparkle to target professional 
designers as part of the Expression line; 
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Cider is the code name for an Avalon 
designer that will be hosted inside Visual 
Studio Orcas. 

Evaluating vector illustration tools is 
well outside my area of expertise, but it 
was easy enough to create an ellipse with 
some rotated text inside and export it 
from Acrylic as XAML. It was also easy to 
take that XAML and place it 
inside a <Button> tag, with a 
"Click" attribute whose value 
I corresponded to the name of 
an event-handler that I wrote 
inside my "code behind" class. 
(Although how the attribute 
string is associated with a 
method is one of those "how 
does it know?" things you have 
to spend some time under the 
covers to understand.) 
XAML exported by Acrylic, 
was disappointing. Instead of 
creating two tags, one for the rotation 
transformation and another for the text, 
the "Hello WPF" string was transformed 
into a series of vector paths. The trans- 
formation from a WYSIWYG designer 
to a markup language is going to be the 
real telling point of what illustration tool 
to use with XAML. Writing an export 
plug-in that creates a lowest common 
denominator representation will be easy. 
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Writing a tool that provides control of 
the layout managers, flexibility in terms 
of composition and extension, provides 
for internationalization and accessibility, 
etc. — that will be difficult. 

Even with hand-typed code, the types 
of UI composition that are easily achiev- 
able are very, very impressive. Putting 
aside the flashy graphics, the text capabil- 
ities alone appear to be enough to drive a 
switch toward WPF. 

Despite my difficulties, my suspi- 
cion that WPF will become de rigueur 
for brand-supporting software ("What 
the Bookseller Saw," Nov. 1, page 36) 
has firmed into a conviction. It is still 
common for people writing about WPF 
to say that it is native to Windows Vista 
and is being "ported" back to Windows 
XP and Windows Server 2003, which 
might lull you into thinking it can be 
ignored. 

As we go to press, it's actually easiest 
to develop WPF using Windows XP and 
beta versions of Visual Studio 2005. By 
the time you read this, a new Windows 
Vista preview and a WinFX SDK that 
targets the released .NET 2.0 runtime 
should be available. Learning WinFX 
ought to be the New Year's resolution of 
anyone who wants to stay employed 
writing Windows applications. I 

Larry O'Brien is a technology consul- 
tant, analyst and writer Read his hlog at 
www. knowing, net. 



JasperReports Disappoints 



So, you've just bought a used car. You 
put the key in the ignition, and noth- 
ing happens. You turn to the salesman, 
who looks you in the eye and says, "Oh! 
you wanted an engine with that car! 
That'll cost you extra." This same story 
applies to a lot of free software. You can 
download it for free, but when it comes 
to learning how to use it, or getting all of 
the features that you really require, it 
will cost you extra. 

I've been spending the past few 
days working with JasperReports 
(jasperreports.sourceforge.net). This 
package is a popular report generator 
that started out as an open-source 
project and has now transmogrified 
into a company called JasperSoft (www 
.jaspersoft.com/index.html). 

The problem is that JasperReports 
itself is an amateurish piece of work with 
an unwieldy install process and lousy 
documentation. You must download the 
library from SourceForge, but like a lot 
of open-source software, you must also 
manually find and load other libraries to 
satisfy internal dependencies, then you 
also have to install ant, and run various 
ant scripts to compile the thing. The 
online documentation is the typical dis- 
organized collection of "sample apps" 
with an inadequate overview thrown in 
as an afterthought. In the you-want-an- 



engine-with-that-car department, the 
author of the library will sell you a 
US$50 book ("The JasperReports Ulti- 
mate Guide") that comprises the real 
documentation. Or so it would seem. 

Unfortunately, much of the "Ulti- 
mate Guide" itself is made up of 
sequences of words that begin with a 
capital letter and end with a 
period, but which don't form 
a sentence in the English lan- 
guage. For example: "The ini- 
tial report templates have to 
be compiled into a more 
digestible form before being 
used for filling with data." And 
"To use a report virtualizer 
is very simple. It is only about 
supplying an instance of the 
net. sf.jasperreports. engine. 
JRVirtualizer interface as the value 
for the built-in parameter called 
REPORT_VIRTUALIZER when filling 
the report." The documentation is filled 
with programmers' conceits, like using 
an XML DTD to describe syntax — a for- 
mat that virtually nobody understands, 
though it does prove that the author is 
more of an uber geek than you. To make 
things more confusing, the documenta- 
tion literally has no examples in it. 

Shelling out $50 for a book this bad 
adds insult to injury. 




All of the above is, unfortunately, 
standard practice with many open- 
source projects, but you can't really 
complain — you get what you pay for. 
JasperSoft, though, is trying to become a 
real company without fixing any of these 
problems. How can I trust an organiza- 
tion that makes its core project this 
inconvenient to install, and 
that thinks documentation 
this bad is acceptable? 

Moving on to the library 
itself, JasperReports is essen- 
tially an XML-to-report trans- 
lator. You specify the report 
format in XML, and the 
library merges data into the 
report for you, formats it and 
provides you with ways to 
either print the report or 
export it in various formats (like HTML 
or PDF). This way of doing things is 
honestly useful in some settings. 

For example, if your client- side pro- 
gram needs to print canned reports, 
JasperReports can save you a bunch of 
work, particularly if you use one of the 
various visual tools to lay out the report 
(iReport Designer from JasperSoft itself 
or JasperAssistant, www.jasperassistant 
.com, for example). Much of that miser- 
able documentation describes the con- 
tents of the XML report-description file 



that the visual tool creates for you, so you 
can skip the docs if you use a visual tool. 

Other scenarios are less compelling. 
Specifying a report in Jasper XML only 
to have Jasper export it as CSV (comma 
separated values) or HTML seems like a 
lot of busy work. Converting a result set 
to CSV is a trivial amount of work, and 
it's easier to specify the report in 
XHTML with a little JSTL thrown in 
than it is to use Jasper's XML format. 
(I'd love to see a report printer that used 
XHTML/JSTL as its report-description 
language. That way, I could specify a 
report for the Web and get a nicely 
printed version as well.) 

It turns out that the application that 
I'm writing at present needs only CSV, 
HTML and PDF output. I'm debating 
now whether to use Jasper to create the 
PDF, but the library that Jasper itself 
uses for creating PDFs (iText from 
www.lowagie.com/iText) looks pretty 
good, so I may use it directly. I've given 
iText only a cursory inspection, so I'll 
report back on it in a future column. 

In all, JasperReports, in spite of its 
popularity, is something of a disappoint- 
ment, and the fact that JasperSoft hasn't 
fixed the obvious deployment and docu- 
mentation problems is inexcusable. 
Hopefully, they'll get serious in the future, 
but if not, there are other alternatives. I 

Allen Holub is an architect, consultant 
and instructor in C/C++, Java and OO 
Design. Reach him at www.holuh.com. 
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Oh, Say Can You CA? 



The lack of a coherent vision and an 
inability to deeply integrate all the 
products it acquired over the years were 
not what ultimately led to Computer 
Associates' taking a huge tumble last 
year. No, it was the weight of financial 
scandals and criminal charges against 
some of its top executives that did that. 

But with a new management team in 
place and sales practices that they say 
no longer include threatening 
to yank critical infrastructure 
software if contracts aren't 
signed, company executives 
were working overtime at the 
CA World conference last 
month to convince its cus- 
tomers and partners that a 
coherent vision and deep 
integration of its core prod- 
ucts can turn things around. 

At the Las Vegas event, the 
company introduced a new name. Now, 
it's just CA; the old Computer Associates 
moniker is history. The company's man- 
agers clearly hope that the ill will is gone 
as well. CA showed off a new logo. It 
offered up new product categories. It 
told its customers that it's time to 
"believe again." Life with CA, chief 
executive John Swainson promised, 
would be simple. 

We've been down this road before. 

In 2001, Computer Associates 
acknowledged its customers were having 
a difficult time wading through a prod- 
uct portfolio of titles in the thousands, so 
it defined three main business areas — 
infrastructure management, information 
management and business process man- 
agement — and subdivided those into 
enterprise management, security, stor- 
age, portal and knowledge management. 

At the time, corporate vice presi- 




dent Carl Hartman said the company 
was "focused on defining and articulat- 
ing a strategy to the market at large." It 
gave the enterprise management group 
the Unicenter name, storage products 
were called BrightStor, and the securi- 
ty solutions would be dubbed eTrust. 
The overall brand for information 
management was Jasmine, with the All- 
Fusion label going to application life- 
cycle management products, 
Advantage going to the data 
management and app devel- 
opment tools, and Clever- 
Path becoming the name for 
knowledge management and 
predictive analysis products. 
At CA World 2004, the 
company announced that for 
the sake of clarity and sim- 
plicity, it was going to con- 
solidate its developer tools 
under the AllFusion brand. In April of 
this year, the company realigned its 
business units into enterprise systems 
management, security management, 
storage management, business service 
optimization and the CA products 
group, which houses the AllFusion- 
branded development and life-cycle 
tools. Again, this was done to simplify 
things for its customers. Then, in May, 
executive vice president Russell Artzt 
acknowledged that developer tools 
were not really core to CA's business. 
The emphasis, he said, would be on 
network management and security. 

Earlier in 2005, the company said it 
would address four markets — systems 
management, security, storage and 
business service optimization — and has 
said its goal is to cut a number of the 
products from its extensive portfolio. 
This was done — you guessed it — to 



simplify and clarify CA's offerings for 
its customers. 

There is nothing simple about deal- 
ing with CA. It still offers about a thou- 
sand products that address a wide range 
of IT issues. But even so, I can't imagine 
a conversation taking place in an enter- 
prise in which a CIO decides the com- 
pany needs business service optimiza- 
tion — whatever that means — and calls a 
CA sales rep to get it done. 

CA elated stockholders for a long 
time with its growth-through-acquisition 
strategy that fueled the company's bot- 
tom line. Then, through what has been 
revealed to be improper booking of 
license sales and renewals, and coercive 
tactics by its sales representatives, com- 
pany executives were able to keep rev- 
enue and earnings figures high through 
the years. 

Perhaps Serena saw itself heading 
down this path when it agreed to be 
acquired and taken private by a ven- 
ture equity firm. Serena experienced 
big growth through the acquisitions of 
Merant, TeamShare and other compa- 
nies, and perhaps was feeling the pres- 
sure of having to be able to show equal 
growth year in and year out. It also has 
been revealed that Serena's integration 
of its own products has been a struggle, 
and it hopes to use the Application 
Lifecycle Framework project it is 
heading up for the Eclipse Foundation 
to provide the deep integration it 
desires. 

Serena, though, has one huge advan- 
tage over CA. While both struggle with 
product integration, Serena at least still 
has the trust of its customers and part- 
ners. It will take more than a new name 
and reorganization for CA to return to 
its place of prominence in the tech 
world. I 

David Rubinstein is editor-in-chief of 
SD Times. 



The Nasdaq Listing Qualifications Panel last month gave Mercury Interactive an 
extension to Jan. 3 r 2006, to file its quarterly earnings reports for the periods end- 
ing June 30 and Sept. 30, 2005, as well as earlier periods that must be restated in 
the wake of an internal investigation that showed accounting errors were made in 
the reporting of stock option grants. Mercury had been threatened with de-listing, 
and the Nasdaq panel said it will not grant any further extensions . . . Unix soft- 
ware provider The SCO Group has raised US$10 million through the private place- 
ment of more than 2.8 million shares of common stock to existing institutional 
shareholders and one member of the board of directors. The shareholders paid 
$3.50 per share while the board member paid $3.92. "This added investment is a 
vote of confidence by our existing investors that will bolster our efforts over the 
long-term to succeed in the marketplace with our products and continue protect- 
ing our intellectual property," said SCO CEO Darl McBride in a statement. 

EARNINGS: NEON Systems announced revenue of US$5.9 million for its sec- 
ond quarter of fiscal year 2006, a 58 percent increase from $3.6 million in the sec- 
ond quarter of the prior year. Net income for the second quarter was 7 cents per 
share, compared with 6 cents per share from the same year-ago period. "We are 
delighted to report such a strong quarter, although we still remain focused on our 
annual rather than quarterly performances," said Mark Cresswell, president and 
CEO of NEON . . . Salesforce.com posted fiscal third-quarter revenue of US$82.7 



million, an increase of 78 percent from the same quarter a year ago. GAAP net 
income was $13.1 million. Non-GAAP net income was $6.3 million, an increase of 194 
percent from a year earlier, the company reported . . . Wind River Systems 
reported a revenue increase of 13 percent year-over-year to US$67.6 million for its 
fiscal third quarter. Non-GAAP net income was $6.9 million and diluted earnings 
were 8 cents per share; GAAP net income was $5.7 million with diluted earnings of 
6 cents per share . . . Agile Software reported revenue of US$31.5 million for its 
second quarter of fiscal 2006, compared with $28.2 million for the second quarter 
of fiscal 2005. Net loss for the second quarter of fiscal 2006, on a GAAP basis, was 
$10.1 million, compared with $11.2 million for the second quarter of fiscal 2005. 
"Agile continues to win in the market, and Agile customers continue to broaden 
their deployment of our solutions. In the second half of our fiscal year we will be 
focused on driving more predictable revenues and improved bottom line 
performance while continuing to deliver value to our customers," said Jay Fulcher, 
president and CEO of Agile . . . Application life-cycle management software 
provider MKS reported revenue of US$11.5 million for the second fiscal quarter 
2006, an increase of 23 percent over the $9.4 million it took in for the same peri- 
od a year earlier. Net income also increased, to $900,000, from $200,000 a year 
earlier. The company also announced that Michael W. Harris has been promoted to 
president, in addition to his role as COO. Douglas Sawatzky, vice president of 
finance, has been promoted to CF0. 1 



CALENDAR OF EVENTS 



Macworld Conference 

San Francisco 
IDG WORLD EXPO 

www.macworldexpo.com 



Jan. 9-13 



VSLive Jan. 29-Feb. 2 

San Francisco 

FAWCETTE TECHNICAL PUBLICATIONS 

www.ftponline.com/conferences/vslive/2006/sf 



Developer Relations 
Conference 

San Francisco 
EVANS DATA 

www.evansdata.com/drc2 



Feb. 6-7 



Software Security Summit Feb. 6-8 

San Diego 
BZ MEDIA 

www.S-3con.com 



RSA Conference 


Feb. 13-17 


San Jose 




RSA SECURITY 




2005.rsaconference.com/us/C4P06 




Web Services/SOA 


Feb. 27 


On Wall Street 




New York 




LIGHTHOUSE PARTNERS & FLAGG MANAGEMENT 


www.webservicesonwallstreet.com 




SHARE 


March 5-10 


Seattle 




SHARE 




www.share.org 




Business Intelligence 


March 6-8 


Summit 




Chicago 




GARTNER 




www.gartner.com/2_events/conferences/bi4.jsp 


Emerging Technology 


March 6-9 


Conference 




San Diego 




O'REILLY MEDIA 




conferences.oreillynet.com 




Intel Developer 


March 7-9 


Forum Spring 




San Francisco 




INTEL 




www.intel.com/idf/us/fall2005 




SD West 2006 


March 13-17 


Santa Clara 




CMP MEDIA 




www.sdexpo.com 




BrainShare 2006 


March 19-24 


Salt Lake City 




NOVELL 




www.novell.com/brainshare 




EclipseCon 


March 20-23 


Santa Clara 




ECLIPSE FOUNDATION 




www.eclipsecon.org/2006/Home.do 




Game Developers 


March 20-24 


Conference 




San Jose 




CMP MEDIA 




www.gdconf.com 




LinuxWorld 


April 3-6 


Conference & Expo 




Boston 




IDG WORLD EXPO 




www.linuxworldexpo.com/live/12 




Embedded Systems 


April 3-7 


Conference Silicon Valley 


San Jose 




CMP MEDIA 




www.esconline.com/sv 





For a more complete calendar of U.S. software 
development events, see www.bzmedia.com/calendar. 
Information is subject to change. Send news about 
upcoming events to events@bzmedia.com. 
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Hook up with MapForce® 2006, and build 
Web services without writing any code. 

New in MapForce 2006: 

• Drag-and-drop Web services implementation 
• Advanced flat file parsing and integration 
• Project-wide code generation 
• Embedding in your applications 
ria OLE / ActiveX 
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Altova® MapForce, the tool awarded for easy 
integration of XML, database, text, and EDI 
file formats, now also lets you implement 
Web services in a visual way. Simply drag 
connecting lines from information sources to 
targets and drop in data processing functions. 
MapForce converts data on-the-fly and auto- 
generates data mapping code in XSLT 1.0/2.0, XQuery, 
Java, C++, or C# for use in your data integration and 
Web services applications. Give your data direction! 
Download MapForce® 2006 today: www.altova.com 
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Improve Your Process, Start Testing Now 



Once you start using our tools, you are well on your way to building 
rock solid applications, in the shortest possible time, guaranteed! 

Get your free trial at www.automatedqa.com\downloads 



Award Winning Testing Solutions 



TestComplete 

"AuiomatedQA's TestComplete is a great product and just as capable as the market 
!eader at less than one-tenth the prioa. Why would anybody pay $6000 per seat for 

test automation?" 

Joet Spolsky 



• GUI Testing 

• Unit Testing 

• Regression Testing 

• Functional Testing 

• Load Testing 

• Distributed Testing 

• Web Testing 

• Data-Driven Testing 

• Object-Driven Testing 






i 

mi 



Performance and Memory 
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* Managed/Un managed Applications 

■ Performa nee Analysis 

■ Test Coverage 

■ Memory Analysis 

* Line-level Precision 

* MicrosoftVisualStiidio.NET 
Integration 



issue Tracking and Project 
Managment 
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• Configurable Workflows 

• Configurable Fields 

• Configurable Forms 

• Scriptable Macros 

• Email Notifications 

• Web Interface 
Windows Interface 



Build Automation and Release 
Managment 



Automated 
Build Studio 

• Visual Macro Builder 

* Extensible Actions 

• Scheduled Builds 

* Test Integration 

• Issue Tracking Integration 

* Microsoft Visual Studio .NET 
Integration 
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